The Full Stack Lead, IAM Solutions, is responsible for designing, developing, and maintaining custom identity and access management solutions that support secure, scalable, and automated access across the organization. This role focuses on building and enhancing IAM capabilities such as identity lifecycle management, role and entitlement models, automated provisioning and deprovisioning, access controls, and system integrations across enterprise platforms.
This engineer will play a key role in developing custom solutions and automation for platforms such as Okta, Salesforce, and ServiceNow, Azure, and AWS with an emphasis on secure integration patterns, operational reliability, and long-term maintainability. The role works closely with cybersecurity, infrastructure, application owners, and business stakeholders to translate IAM and business requirements into practical technical solutions that improve security, reduce manual effort, and support business growth.
ali
- Design, build, and maintain custom IAM applications, APIs, services, and automation that support identity lifecycle management, role-based access, entitlement management, and provisioning workflows.
- Develop full stack solutions that enable secure identity orchestration, access automation, and administrative workflows across platforms including Okta, Salesforce, ServiceNow, and other enterprise applications.
- Experience mentoring or leading developers, with the ability to help junior team members build IAM domain expertise
- Experience owning or contributing to SDLC process standards and continuous improvement for a development team.
Strong stakeholder management skills, with experience representing a technical team's services and standards to partner product owners and other development teams. - Partner with cybersecurity, infrastructure, business application owners, and other stakeholders to gather requirements and translate them into secure, scalable technical designs.
- Design and implement integrations between IAM platforms, enterprise systems, HR-driven workflows, ticketing systems, and internal tools using APIs, web services, event-driven patterns, and data transformation logic.
- Build and support solutions related to identity attributes, access roles, group management, entitlement assignment, and policy-driven automation.
- Participate in the full software development lifecycle, including design, development, testing, deployment, documentation, and operational support.
- Troubleshoot and resolve incidents, defects, integration failures, provisioning issues, and access-related incidents while improving system stability and supportability.
- Ensure IAM solutions are designed with strong security controls, auditability, resilience, and scalability in mind.
- Contribute to technical standards, design reviews, code reviews, and engineering practices that improve solution quality and reduce risk.
- Support testing and validation efforts, including unit, integration, and end-to-end testing of IAM workflows and provisioning logic.
- Maintain technical documentation for system designs, workflows, integration points, and operational procedures.
- Stay current with IAM trends, security practices, and modern software engineering approaches, and recommend improvements where appropriate.
Qualifications
Bachelor’s degree in Computer Science, Information Technology, Software Engineering, or a related field, or 6+ years of professional software engineering experience, including several years of hands-on experience building custom IAM, access automation, or enterprise integration solutions.
Practical experience developing and supporting solutions that integrate with enterprise platforms such as identity providers, IT service management systems, CRM platforms, HR systems, or related business applications.
Experience developing secure integrations and APIs across platforms such as Okta, Salesforce, ServiceNow, and other enterprise systems.
Experience building automated provisioning, deprovisioning, and access governance solutions.
Preferred
7+ years of experience designing and delivering custom IAM software solutions in a complex enterprise environment.
Certifications: CISSP, IDPro, CCSP, CIMP, Okta Certified Professional or Developer, MS Azure SC-300, AWS CCP, AWS CSA
Experience utilizing AI tools to create and test custom automation agents.
Required Knowledge, Skills, Abilities
Strong full stack software development experience with two or more modern programming languages such as Python, Java, C#, JavaScript, or similar technologies.
Strong understanding of IAM concepts, including identity lifecycle management, provisioning and deprovisioning, roles, group-based access, entitlements, least privilege, segregation of duties, and access control models.
Experience designing and building custom IAM workflows and automation for user onboarding, job changes, termination processing, and access requests.
Knowledge of authentication, authorization, and identity-related security principles.
Experience working with REST APIs, webhooks, system-to-system integrations, and data exchange patterns.
Strong understanding of secure software development practices, including logging, error handling, secrets protection, input validation, and testing.
Familiarity with modern software architecture and engineering practices, including modular design, version control, CI/CD, automated testing, and code review.
Experience working with relational databases, data models, and query development.
Strong problem-solving and troubleshooting skills, especially in diagnosing complex workflow, integration, and access issues.
Familiarity with Agile delivery practices and tools such as Jira.
Ability to balance technical design, delivery speed, operational support, and long-term maintainability.
Strong written and verbal communication skills, with the ability to work effectively across technical teams, security teams, and business stakeholders.
Skills Required
- Bachelor's degree in CS/IT/Software Engineering or 6+ years professional software engineering experience
- Hands-on experience building custom IAM, access automation, or enterprise integration solutions
- Practical experience integrating with enterprise platforms (identity providers, ITSM, CRM, HR systems)
- Experience developing secure integrations and APIs with Okta, Salesforce, ServiceNow, and other enterprise systems
- Experience building automated provisioning, deprovisioning, and access governance solutions
- Experience mentoring or leading developers and contributing to SDLC/process standards
- Strong full stack development experience with two or more languages (Python, Java, C#, JavaScript)
- Strong understanding of IAM concepts (lifecycle management, roles, entitlements, least privilege, SOD)
- Experience designing and building IAM workflows for onboarding, job changes, terminations, and access requests
- Experience working with REST APIs, webhooks, system-to-system integrations, and data exchange patterns
- Familiarity with secure software development practices (secrets protection, logging, input validation, testing)
- Experience with relational databases, data models, and query development
- Familiarity with Agile delivery practices and tools such as Jira
- 7+ years designing and delivering custom IAM solutions in complex enterprise environments
- Certifications such as CISSP, IDPro, CCSP, CIMP, Okta Certified Professional/Developer, MS SC-300, AWS CCP/CSA
- Experience utilizing AI tools to create and test custom automation agents
AHEAD Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about AHEAD and has not been reviewed or approved by AHEAD.
-
Retirement Support — 401(k) contributions are matched dollar-for-dollar on the first $5,000 each year, with matching made each pay period and immediate 100% vesting. This structure signals above-standard employer support for retirement savings.
-
Affordable Benefits — Medical options include low employee premiums for PPO and HDHP plans, and the HDHP adds employer HSA funding plus a dollar-for-dollar HSA match up to stated amounts. Dental and vision plans list very low per-paycheck costs, helping keep overall healthcare spend manageable.
-
Wellbeing & Lifestyle Benefits — No-cost telemedicine (including virtual mental health when enrolled), free Calm access for the employee and dependents, and an EAP with counseling are included. Company-paid life and disability plus voluntary protections (legal/ID, pet insurance) and other extras round out a comprehensive set of supports.
AHEAD Insights
What We Do
AHEAD builds platforms for digital business. By weaving together cloud infrastructure, intelligent operations, and modern applications, we help enterprises deliver on the promise of digital transformation.
