IAM Operations Engineer

The Role

Do you lie awake at night, thinking of NIST SP800-63-3? Do you get shivers when you hear the words “service account”? Does “zero trust” actually mean something to you? As they say, Identity is the new perimeter, and it could be your new frontier here at Pure Storage.

The Global Information Security Office (GISO) at Pure Storage is seeking an experienced IAM Operations Engineer to operate and continuously improve our enterprise Identity and Access Management services. This role is responsible for ensuring the stability, scalability, and operational effectiveness of IAM platforms while delivering secure, compliant access across on-premises and multi-cloud environments.

In this role, you will own the day-to-day operation of authentication and identity lifecycle services, supporting incident, problem, and change management processes. You will ensure IAM services meet defined SLAs, adhere to security policies, and maintain compliance with regulatory and audit requirements while enabling a seamless end-user experience.

What you’ll be doing:

• Manage IAM service performance by defining, tracking, and analyzing operational KPIs, SLAs, and SLOs to ensure high availability, reliability, and continuous improvement.
• Administer and support enterprise IAM platforms, including:
• Identity Providers (IdP)
• Privileged Access Management (PAM)
• Identity Governance & Administration (IGA)
• Secrets Management and PKI (e.g., Okta, Lumos, Okta Privileged Access, 1Password, HashiCorp Vault, Keyfactor, etc.)
• Perform day-to-day IAM operational activities while contributing to the strategic IAM roadmap.
• Provide advanced technical support and serve as an escalation point for IAM-related issues.
• Own the lifecycle management of IAM services, including maintenance, upgrades, backups, monitoring, imaging, and patching.
• Partner with business stakeholders to adapt IAM controls and policies in alignment with evolving business processes while ensuring a seamless end-user experience.
• Develop and maintain documentation, operational procedures, and runbooks to ensure service sustainability and operational readiness.
• Deliver new IAM services and features in support of evolving business and security requirements.
• Oversee access reviews, RBAC implementations, and identity lifecycle management processes to maintain compliance and governance standards.
• Identify and implement automation opportunities to improve efficiency, reduce manual processes, and strengthen security posture.
• Lead problem management efforts by conducting root cause analysis, resolving recurring issues, and improving overall platform reliability and user experience.
• Participate in a scheduled on-call rotation to provide 24/7 support for production systems.

What you bring to the team:

• 5+ years of experience supporting enterprise IAM platforms (Okta, PAM solutions, IGA tools, Vault, PKI systems, etc.).
• Proven ability to define, govern, and report on SLAs, SLOs, OLAs, and KPIs to ensure service performance, reliability, and customer satisfaction.
• Familiarity with leading incident and problem management efforts, conducting root cause analysis (RCA), and implementing corrective and preventive actions to strengthen service resilience.
• Experience participating in structured change governance processes, risk assessment, and release oversight.
• Hands-on experience with observability, logging, and monitoring tools (e.g., Splunk, Prometheus, Datadog, etc.).
• Strong understanding of identity lifecycle management, RBAC, and access governance principles.
• Nice to have experience in Infrastructure as Code and automated configuration management using tools like Terraform and/or Ansible.
• Technical experience with scripting and automation (e.g., Python, PowerShell, Bash, Tines) to improve operational efficiency and streamline IAM services.
• Experience driving service reviews, performance reporting, and stakeholder communications across technical and business audiences.
• Strong documentation and governance experience, including maintaining service catalogs, service charters, SOPs, and operational runbooks.

#LI-ONSITE