IAM Engineer, Identity Secrets & Access Management

Job Description:

The Security Team is seeking a highly skilled engineer with a strong focus on identity and access management to help drive our mission of securing user and workforce authentication at scale. This role is ideal for someone who thrives in solving complex challenges and has a passion for building robust, scalable identity solutions in dynamic engineering environments.

You’ll work hands-on with Okta and Okta Workflows to design and implement secure SSO integrations, manage access policies, and streamline identity automation across the enterprise. Experience with authentication protocols, identity lifecycle management, and SailPoint is essential, as you’ll play a key role in shaping the future of access control and enterprise identity at Dropbox.

Responsibilities

• Design, implement, and maintain secure identity and access management (IAM) solutions using Okta, Okta Workflows, and SailPoint to support scalable, automated, and auditable identity lifecycle management
• Lead SSO integration efforts for internal and third-party applications, ensuring secure authentication and seamless user experience across the enterprise
• Develop and enforce access control policies and governance models to meet security, compliance, and SOX certification requirements
• Support the onboarding of enterprise applications into Okta, including custom configuration, testing, and rollout to production
• Enhance and maintain synchronization services between identity sources and downstream systems using SailPoint IdentityNow and directory services
• Participate in incident response, troubleshooting, and resolution of identity-related issues across infrastructure and application stacks
• Contribute to the development of documentation, standards, and reusable templates for identity workflows and access reviews

Requirements

• Okta Administration – Expertise in Okta platform, including Universal Directory, Okta Workflows, Lifecycle Management, and SSO integrations
• SailPoint IdentityNow – Hands-on experience configuring identity governance, access reviews, provisioning, and policy management
• Authentication Protocols – Strong understanding of SAML, OAuth, OIDC, and MFA.
• Directory Services – Proficiency with Active Directory, LDAP, and SCIM
• Automation & Scripting – Ability to build workflows and automations using tools like Okta Workflows, PowerShell, Python, or JavaScript
• IAM Architecture – Knowledge of enterprise identity architectures and zero trust principles.
• Security & Compliance – Familiarity with SOX, access certifications, and audit support for IAM environments
• Application Onboarding – Experience onboarding internal and SaaS applications into Okta or SailPoint with appropriate access controls
• API Integration – Comfort working with REST APIs for system integration and workflow development

Preferred Qualifications

• 3+ years of experience in identity and access management (IAM), with direct ownership of Okta and/or SailPoint implementations
• Hands-on experience with Okta Workflows, advanced SSO configurations, and lifecycle management
• Strong working knowledge of SailPoint IdentityNow, including identity governance, role management, and access certifications
• Relevant certifications such as Okta Certified Professional, Certified Identity and Access Manager (CIAM), CISSP, or Security+ are a plus

Compensation

US Zone 1

This role is not available in Zone 1

US Zone 2$109,400—$148,000 USD

US Zone 3$97,200—$131,600 USD