IAM Engineer

Software Engineer II - Identity & Access Management (IAM) Integration Engineer

About the Role

We are seeking a technically strong Software Engineer II to join our Cybersecurity Identity & Access Management (IAM) Engineering team. This position plays a key role in the bank's initiative to centralize application and database access across the enterprise.

While this role sits within an engineering organization, it is not a traditional development-focused position. Instead, you will serve as the technical liaison between application teams and IAM engineering, helping application owners understand onboarding requirements, identify appropriate integration approaches, and coordinate solutions across multiple cybersecurity and governance functions.

This role is ideal for an experienced engineer who combines software engineering expertise with strong communication skills and a broad understanding of authentication, access management, infrastructure, and application integration.

What You'll Do

• Partner with application teams to onboard applications into the bank's centralized Identity Governance and Administration (IGA) environment.
• Gather and analyze technical onboarding requirements through questionnaires, documentation reviews, and stakeholder discussions.
• Evaluate application authentication and authorization models, including OIDC, SAML, service principals, and related IAM technologies.
• Determine appropriate IAM integration approaches and identify the engineering, governance, and privileged access teams required for successful onboarding.
• Act as the primary point of coordination between application teams, IAM engineering, governance, and privileged access stakeholders.
• Support enterprise initiatives to centralize and govern database access across platforms such as SQL Server, Oracle, Cassandra, and MongoDB.
• Investigate and troubleshoot integration challenges, translating technical issues into clear, actionable guidance for both engineering and business stakeholders.
• Drive onboarding activities from initiation through completion, ensuring strong communication and alignment across multiple teams.
• Contribute to the continuous improvement of onboarding processes, integration practices, and access governance standards.

Minimum Qualifications

• Experience as a software engineer with the technical depth to understand application architectures, integrations, authentication mechanisms, databases, and infrastructure environments.
• Knowledge of Identity and Access Management (IAM) concepts and application authentication patterns.
• Understanding of modern authentication standards, including:
• OpenID Connect (OIDC)
• Security Assertion Markup Language (SAML)
• Service principals and related identity concepts
• Experience evaluating technical requirements and integration designs.
• Knowledge of database access, connectivity, and security concepts.
• Understanding of both cloud-based and on-premises infrastructure environments.
• Strong communication and stakeholder management skills.
• Ability to work across multiple teams and drive technical initiatives forward with minimal supervision.
• Demonstrated ownership mindset with the ability to manage end-to-end onboarding or integration processes.

Preferred Qualifications

• Background as a senior or highly experienced software engineer who has expanded into broader technical leadership, integration, or stakeholder-facing responsibilities.
• Experience within cybersecurity, IAM, Identity Governance and Administration (IGA), or access management organizations.
• Experience with .NET development.
• Exposure to or experience with Rust.
• Hands-on experience with one or more of the following database technologies:
• SQL Server
• Oracle
• Cassandra
• MongoDB
• Experience coordinating technical integrations across application engineering, IAM, governance, and privileged access management teams.
• Ability to maintain a consistent onsite presence in the Buffalo, New York area.

Technical Knowledge Areas

Successful candidates will have experience in several of the following areas:

• Software engineering and application architecture
• Identity & Access Management (IAM)
• Identity Governance & Administration (IGA)
• Application onboarding and integration
• OIDC and SAML authentication protocols
• Service principal management
• Database access and connectivity
• Cloud and on-premises infrastructure
• Technical troubleshooting and systems integration