About this role
Why This Role Matters
This Engineer III designs, implements, and maintains identity and access management solutions that support secure access across the organization. This role contributes to IAM modernization efforts while improving authentication, authorization, automated provisioning, access governance, and compliance.
As an experienced individual contributor, you will help shape technical decisions, deliver high-quality solutions, and continuously improve the IAM program by evaluating emerging identity threats, technologies, and best practices.
Team and Technology
You will work across SailPoint IIQ, SailPoint ISC, Auth0, Microsoft Entra ID, Java, REST APIs, GraphQL, SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP, and Active Directory. You will partner with application, infrastructure, security, audit, and business teams to define and implement access requirements. The role supports complex applications, data integrations, automated provisioning processes, and compliance with organizational policies and frameworks such as SOX, TISAX, GDPR, and CMMC.
What Success Looks Like
Serve as a lead contributor for identity and access management modernization efforts.Lead design sessions for the team.Identify, manage, and resolve incidents for applications owned by the team.Become established as a mentor for other engineers.Continuously improve the IAM program through emerging technologies and best practices.Key Areas of Impact
Technical Depth and Delivery
Design, implement, maintain, and support identity and access management solutions while automating identity-management processes using PowerShell, APIs, Java, AI, and other development tools.Configure and support SSO, MFA, conditional access, passwordless authentication, provisioning, federation, and directory services while contributing to operational excellence, incident response, and continuous improvement.Architectural Scale
Develop role-based and attribute-based access controls, integrate enterprise applications with IAM platforms, and evaluate system dependencies, operational impacts, and design tradeoffs.Design and implement scalable IAM solutions using SailPoint IIQ, SailPoint ISC, Auth0, Microsoft Entra ID, REST APIs, GraphQL, SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP, and Active Directory.Team Collaboration Scale
Partner with application, infrastructure, security, audit, and business teams to define and implement access requirements while supporting planning, coordination, and alignment across initiatives.Collaborate across engineering teams, provide technical feedback, support the growth of less experienced engineers, and contribute to a culture of knowledge sharing and continuous improvement.Influence and Advocacy
Lead design sessions, share technical recommendations, communicate risks and tradeoffs, and advocate for solutions that improve security, delivery, quality, and customer outcomes.Evaluate emerging identity threats, technologies, and best practices to continuously improve the IAM program and strengthen access governance capabilities.Scope of Vision
Contribute to IAM modernization efforts by translating business and technical priorities into actionable plans and technology solutions with a near- to mid-term planning horizon.Scale of Business Understanding
Support compliance with organizational policies and frameworks, including SOX, TISAX, GDPR, and CMMC, while balancing technical quality, operational effectiveness, and business needs.Conduct access certifications, entitlement reviews, and privileged-access assessments to strengthen security controls and improve customer and business outcomes.This position is on-site and will reside in the greater Seattle, WA. area at one of the following locations depending on availability. Candidates must be local or willing to relocate. Relocation assistance is not offered for this position.
Downtown Seattle Federal Way Lynnwood Bellevue (Factoria) Qualifications for Success
Required
Bachelor’s degree in Computer Science, Information Systems, Engineering, Business, or a related field, or equivalent combination of education and experience in identity management, information security, systems engineering, application development, or infrastructure architecture.Demonstrated experience designing, implementing, supporting, or administering enterprise IAM solutions such as SailPoint IIQ, SailPoint ISC, Auth0, and Entra ID.Experience working with complex applications, data integrations, and automated provisioning processes.Working knowledge of security and compliance principles, including least privilege, separation of duties, and access governance.Experience contributing to technical design discussions and solution architecture decisions.Experience supporting production systems and participating in operational support activities.Experience collaborating across teams to deliver technology solutions and business outcomes.Experience working with agile delivery practices, source control, testing methodologies, and modern engineering workflows.Experience with Agentic AI development processes and practices.Preferred
Five or more years of professional experience in a technical engineering or IAM-focused position.Experience with SailPoint IIQ or ISC, Entra ID, and Auth0 solutions.Relevant certifications, such as Microsoft Certified: Identity and Access Administrator Associate, Azure Security Engineer Associate, SailPoint certification, CISSP, or CISM.Applicants are required to be eligible to lawfully work in the U.S. immediately; employer will not transfer or sponsor applicants for U.S. work authorization (such as an H-1B visa) for this opportunity.
Compensation and Benefits
Base Salary: $124,000 - $186,000
Benefits: Expeditors offers competitive benefits to all full-time employees including:
Paid vacationHolidays (10)Flexible Days (2)Paid Sick Time (accrual rate of 1 hour of sick time per 30 hours paid)401(k) Retirement Savings Plan with employer matchEmployee Stock Purchase Plan (ESPP)Medical, Prescription Drug, Dental & Vision CoverageHealth Savings Account (HSA)Life and Disability InsurancePaid Parental Leave (additional eligibility criteria)Dependent Care Flexible Spending Account (DC FSA)Commuter BenefitEmployee Assistance Program (EAP)Training and Personnel Development ProgramEducational Assistance and ReimbursementPosition is full time (40 hours per week) Monday through Friday All your information will be kept confidential according to EEO guidelines.