Haystack
← Back to Jobs
Technology
CR

IAM Automation Engineer – Okta & Terraform

Critical River, Inc.San Francisco, CA🇺🇸United StatesPosted 4 Sept 2026

Why This Role Stands Out

Advance your career by building cutting-edge identity-as-code pipelines and Okta integrations, offering significant growth potential and skill development in a hybrid work environment. This role is ideal for a mid-senior engineer passionate about automation and secure identity management, so we encourage you to apply and contribute to innovative solutions.

Quick Overview

Seniority
Mid Senior
Work mode
Hybrid
Location
San Francisco, CA, United States
Posted
22 hours ago
OAuthSAMLGitPythonRESTTerraformTypeScript

Job Description

Job title: IAM Automation Engineer – Okta & Terraform
Location: San Francisco, CA, Austin, TX, New York City, NY, & Washington, D.C

Duration: 12+ Months

Position Summary

Build secure identity-as-code pipelines, Okta integrations, and automated employee lifecycle workflows using Terraform, CI/CD, and pull-request-based delivery.

Key Responsibilities

·       Build CI/CD pipelines for identity-as-code deployments.

·       Develop reusable Terraform modules for Okta applications, groups, policies, and workflows.

·       Integrate HR platforms such as ADP with Okta and downstream SaaS applications.

·       Automate onboarding, role changes, access provisioning, and offboarding.

·       Implement testing, approvals, audit logging, rollback, and operational monitoring.

·       Deliver changes through scoped repositories and FTE-reviewed pull requests.

·       Document architecture, deployment procedures, and operational runbooks.

Required Qualifications

·       Bachelor’s degree in a related field or equivalent practical experience

·       Hands-on Terraform and CI/CD experience.

·       Practical Okta automation or integration experience.

·       Experience with REST APIs, Git, pull requests, and code reviews.

·       Understanding of identity lifecycle management and SaaS provisioning.

·       Scripting or software development experience in Python, TypeScript, Go, or similar.

·       Knowledge of secrets management and least-privilege access.

·       Strong communication, ownership, and troubleshooting skills.

Preferred Qualifications

·       Okta Workflows, Lifecycle Management, or Identity Governance.

·       ADP or comparable HRIS integration experience.

·       SCIM, SAML, OAuth 2.0, and OpenID Connect.

·       AI coding assistants or agentic development tools.

·       Experience in a high-growth technology environment.

Similar jobs