IAM Operations Engineer
$176k - $265k USD
We’re in an unbelievably exciting area of tech and are fundamentally reshaping the data storage industry. Here, you lead with innovative thinking, grow along with us, and join the smartest team in the industry.
This type of work—work that changes the world—is what the tech industry was founded on. So, if you're ready to seize the endless opportunities and leave your mark, come join us.
The Role
Do you lie awake at night, thinking of NIST SP800-63-3? Do you get shivers when you hear the words “service account”? Does “zero trust” actually mean something to you? As they say, Identity is the new perimeter, and it could be your new frontier here at Pure Storage.
The Global Information Security Office (GISO) at Pure Storage is seeking an experienced IAM Operations Engineer to operate and continuously improve our enterprise Identity and Access Management services. This role is responsible for ensuring the stability, scalability, and operational effectiveness of IAM platforms while delivering secure, compliant access across on-premises and multi-cloud environments.
In this role, you will own the day-to-day operation of authentication and identity lifecycle services, supporting incident, problem, and change management processes. You will ensure IAM services meet defined SLAs, adhere to security policies, and maintain compliance with regulatory and audit requirements while enabling a seamless end-user experience.
What you’ll be doing:
- Manage IAM service performance by defining, tracking, and analyzing operational KPIs, SLAs, and SLOs to ensure high availability, reliability, and continuous improvement.
- Administer and support enterprise IAM platforms, including:
- Identity Providers (IdP)
- Privileged Access Management (PAM)
- Identity Governance & Administration (IGA)
- Secrets Management and PKI
(e.g., Okta, Lumos, Okta Privileged Access, 1Password, HashiCorp Vault, Keyfactor, etc.) - Perform day-to-day IAM operational activities while contributing to the strategic IAM roadmap.
- Provide advanced technical support and serve as an escalation point for IAM-related issues.
- Own the lifecycle management of IAM services, including maintenance, upgrades, backups, monitoring, imaging, and patching.
- Partner with business stakeholders to adapt IAM controls and policies in alignment with evolving business processes while ensuring a seamless end-user experience.
- Develop and maintain documentation, operational procedures, and runbooks to ensure service sustainability and operational readiness.
- Deliver new IAM services and features in support of evolving business and security requirements.
- Oversee access reviews, RBAC implementations, and identity lifecycle management processes to maintain compliance and governance standards.
- Identify and implement automation opportunities to improve efficiency, reduce manual processes, and strengthen security posture.
- Lead problem management efforts by conducting root cause analysis, resolving recurring issues, and improving overall platform reliability and user experience.
- Participate in a scheduled on-call rotation to provide 24/7 support for production systems.
What you bring to the team:
- 3–5+ years of experience supporting enterprise IAM platforms (Okta, PAM solutions, IGA tools, Vault, PKI systems, etc.).
- Proven ability to define, govern, and report on SLAs, SLOs, OLAs, and KPIs to ensure service performance, reliability, and customer satisfaction.
- Familiarity with leading incident and problem management efforts, conducting root cause analysis (RCA), and implementing corrective and preventive actions to strengthen service resilience.
- Experience participating in structured change governance processes, risk assessment, and release oversight.
- Hands-on experience with observability, logging, and monitoring tools (e.g., Splunk, Prometheus, Datadog, etc.).
- Strong understanding of identity lifecycle management, RBAC, and access governance principles.
- Nice to have experience in Infrastructure as Code and automated configuration management using tools like Terraform and/or Ansible.
- Technical experience with scripting and automation (e.g., Python, PowerShell, Bash, Tines) to improve operational efficiency and streamline IAM services.
- Experience driving service reviews, performance reporting, and stakeholder communications across technical and business audiences.
- Strong documentation and governance experience, including maintaining service catalogs, service charters, SOPs, and operational runbooks.
#LI-REMOTE, #LI-ONSITE
Salary ranges are determined based on role, level and location. For positions open to candidates in multiple geographical locations, the base salary range is reflective of the labor market across the applicable locations.
This role may be eligible for incentive pay and/or equity.
There is no application deadline and we accept applications on an ongoing basis until the job is filled.
The annual base salary range is:
$176,000—$265,000 USD
WHAT YOU CAN EXPECT FROM US:
- Innovation: We celebrate those who think critically, like a challenge, and aspire to be trailblazers.
- Growth: We give you the space and support to grow along with us and to contribute to something meaningful. We have been named Fortune's Best Workplaces in Technology™, Fortune's Best Workplaces in the Bay Area™, and certified as a Great Place to Work®!
- Team: We build each other up and set aside ego for the greater good.
And because we understand the value of bringing your full and best self to work, we offer a variety of perks to manage a healthy balance, including flexible time off, wellness resources, and company-sponsored team events. Check out purebenefits.com for more information.
ACCOMMODATIONS AND ACCESSIBILITY:
Candidates with disabilities may request accommodations for all aspects of our hiring process. For more on this, contact us at TA-Ops@purestorage.com if you’re invited to an interview.
OUR COMMITMENT TO A STRONG AND INCLUSIVE TEAM:
We’re forging a future where everyone finds their rightful place and where every voice matters. Where uniqueness isn’t just accepted but embraced. That’s why we are committed to fostering the growth and development of every person, cultivating a sense of community through our Employee Resource Groups and advocating for inclusive leadership.
Everpure is proud to be an equal opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, status as a protected veteran, status as an individual with a disability, or any other characteristic legally protected by the laws of the jurisdiction in which you are being considered for hire.
Join us and bring your best.
Bring your bold.
Pure and simple.