Staff IAM Engineer

Reports To

Senior Manager - AI & IT

What You Will Be Doing

ChargePoint is looking for a IAM Engineer to lead enterprise identity strategy and platform architecture across cloud, on-premises, and hybrid environments. This role owns cloud identity, directory services, Okta identity workflows, and the transition of applications to modern authentication standards (OAuth 2.0, OIDC, SAML). You will define and implement reference architectures for secure authentication across CLI, browser, and agentic workflows.
You will establish agent identities as a foundational element within the identity platform, enabling access control and auditability for automated and machine-assisted workflows. You will build and implement Conditional Access policies, Privileged Identity Management (PIM), risk-based authentication, and Okta Identity Governance (OIG) programs. You will also scale device management and identity governance systems to meet the demands of AI-powered operations while maintaining reliability, performance, and compliance across large organizational environments.
This is a hands-on technical role. You will code, design, and implement IAM solutions with deep knowledge in AWS, Azure, Teleport, and Terraform. You will partner with security, infrastructure, and product teams to align on architecture, build strategy, and operational ownership.
What You Will Bring to ChargePoint

• Lead enterprise identity strategy and platform architecture, encompassing cloud identity, directory services, and the transition of applications to modern authentication standards (OAuth 2.0, OIDC, SAML).
• Define and implement reference architectures for secure authentication across CLI, browser, and agentic workflows.
• Establish agent identities as a foundational element within the identity platform, enabling access control and auditability for automated and machine-assisted workflows.
• Build and implement advanced identity security controls such as Conditional Access policies, Privileged Identity Management (PIM), and risk-based authentication.
• Scale device management and identity governance systems to meet the demands of AI-powered operations. Ensure reliability, performance, and compliance across large organizational environments.
• Partner with security, infrastructure, and product teams to align on architecture, build strategy, and operational ownership.
• Drive IAM application development: code, design, and implement solutions with deep knowledge in AWS, Azure, Teleport, and Terraform. Deliver reliable solutions that keep engineering teams productive.
• Drive IAM projects end-to-end: take ambiguous access problems, define requirements, architect solutions, and own the rollout and operationalization — not just the design.
• Refine role design and access patterns across AWS, Kubernetes, SaaS, and internal systems — eliminate unnecessary privileges, reduce manual grants, and establish scalable baseline access.
• Run and improve user access reviews (UAR): develop, execute, and design a UAR process and solution that meets compliance requirements while improving real security signal — minimize approver burden through scoping, automation, and clear decision support.
• Identify high-risk permissions and misuse paths, build controls and mitigations, and drive adoption with partner teams to reduce risk exposure.
• Operate with strong security judgment and high signal: distinguish meaningful IAM risk from noise, gather context efficiently, and escalate with crisp rationale and actionable mitigations.
• Document and standardize the paved road: write procedures, runbooks, and automation so access decisions are consistent, scalable, and not dependent on tribal knowledge.
• Conduct Agentic AI IAM requirement analyses, architecture reviews, and security gap assessments across enterprise applications, cloud platforms, AI services, and infrastructure environments.
• Develop automation for access management and secrets lifecycle operations.
• Develop and implement security controls for AI agents, machine identities, APIs, workloads, and autonomous workflows.
• Lead enterprise Agentic AI IAM program execution across multiple workstreams.
• Establish security controls for AI agents, autonomous workflows, bots, and machine identities.
• Standardize identity governance across multi-cloud ecosystems.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related discipline.
• 8-12 years of experience in IAM, cloud security, or cybersecurity engineering.
• Strong experience in Agentic AI IAM architecture, identity governance, secrets management, security engineering, and enterprise IAM program delivery.
• Strong expertise in requirement gathering, current-state assessments, gap analyses, control evaluations, and target-state Agentic AI IAM security architecture design.
• Experience securing cloud-native and hybrid environments and managing hybrid cloud IAM and secrets management programs.
• Knowledge of Zero Trust architecture and machine identity security.
• Experience implementing AI/Agentic security controls and secure automation frameworks.
• Platform experience: Microsoft Entra ID, Okta, HashiCorp Vault, AWS Secrets Manager, Google Cloud Secrets Manager, AWS, Azure, GCP, Kubernetes, container security platforms.
• Experience with Terraform, CI/CD, and DevSecOps tooling.
• Relevant certifications such as CISSP, CISM, or CCSP. (good to have)

Location
Gurgaon/Bangalore, India