IAM Engineer

Toast is driven by building the restaurant platform that helps restaurants adapt, take control, and get back to what they do best: building the businesses they love.

We are seeking a highly motivated and experienced IAM Engineer to join our growing IT team. In this role, you will be responsible for the administration, maintenance, and enhancement of our Identity and Access Management (IAM) systems, with a primary focus on SailPoint and Okta. You will play a critical role in ensuring the security and efficiency of our identity lifecycle management processes.

About this roll* (Responsibilities) 

• Manage and maintain SailPoint IdentityIQ and Okta platforms, including workflows, policies, and user lifecycle management.
• Develop and implement automated provisioning/de-provisioning processes and integrate IAM solutions with various applications.
• Perform system health checks, troubleshooting, and performance tuning for both platforms.
• Create and maintain comprehensive documentation for IAM configurations and processes.
• Collaborate with stakeholders to gather requirements, design solutions, and implement IAM strategies.
• Configure and manage access policies, roles, and authentication protocols across platforms.
• Monitor system logs and alerts for security incidents and participate in audits and compliance assessments.
• Research and evaluate new IAM technologies to drive continuous improvement.

Do you have the right ingredients*? (Requirements)

• 5+ years of experience in Identity and Access Management.
• Strong hands-on experience with SailPoint IdentityIQ, including development, configuration, and administration.
• Extensive experience with Okta administration, including user management, authentication, and application integration.
• Solid understanding of IAM concepts, best practices, and industry standards.
• Experience with scripting languages (e.g., Java, Python) for automation.
• Excellent analytical, problem-solving, and communication skills.

Special Sauce* (Nice to Haves)

• Relevant certifications (e.g., CISSP, CISM, SailPoint Certified Professional).
• Compliance Knowledge (SOX, SOC, PCI)
• Experience with other IAM solutions (e.g., Azure AD, AWS IAM).
• Knowledge of IT security frameworks (e.g., NIST, ISO 27001).

Our Spread* of Total Rewards
We strive to provide competitive compensation and benefits programs that help to attract, retain, and motivate the best and brightest people in our industry. Our total rewards package goes beyond great earnings potential and provides the means to a healthy lifestyle with the flexibility to meet Toasters’ changing needs. Learn more about our benefits at https://careers.toasttab.com/toast-benefits.

*Bread puns encouraged but not required

#LI-REMOTE