Senior Identity and Access Management (IAM) Engineer

PURE IN PRAGUE

Pure Storage’s Research and Development (R&D) Center in Prague has 650+ employees focused on cutting-edge innovation. The team plays a vital role in driving solutions for the as-a-service economy, tackling challenges like the surge in unstructured data and growing security threats like ransomware.

SHOULD YOU ACCEPT THIS CHALLENGE...

Do you lie awake at night, thinking of NIST SP800-63-3? Do you get shivers when you hear the words “service account”? Does “zero trust” actually mean something to you? As they say, Identity is the new perimeter, and it could be your new frontier here at Pure Storage.

The Global Information Security Office (GISO) at Pure is seeking an experienced Identity and Access Management (IAM) Engineer to build, test, and manage our IAM systems and processes. This role is critical in ensuring secure access to corporate resources, enhancing authentication mechanisms, and maintaining compliance with security policies and regulatory requirements.

What you’ll be doing:

• Build, test, and optimize IAM solutions, including user provisioning, authentication, authorization, and access governance.
• Integrate disparate IAM components to form coherent solutions.
• Consult on problem management for IAM solutions.
• Automate IAM processes using scripting (Python, PowerShell, etc.) and integration with APIs.
• Develop and enforce IAM policies, ensuring compliance with industry regulations and frameworks such as NIST, ISO 27001, SOC 2
• Collaborate with security, IT, and compliance teams to enhance IAM security posture.
• Participate in IAM-related incident response, including account compromise investigations and forensic analysis.
• Stay up to date with emerging IAM technologies and best practices to improve security operations.

WHAT YOU’LL NEED TO BRING TO THIS ROLE...

• 5+ years of experience in IAM engineering, security administration, or a related field.
• Strong experience with IAM solutions (e.g., Okta, Active Directory, Azure AD).
• Knowledge of IAM protocols and standards (SAML, OAuth, OpenID Connect, LDAP, SCIM).
• Hands-on experience with privileged access management (PAM) tools such as CyberArk or BeyondTrust.
• Working knowledge of MacOS, Windows, Linux, and industry-leading IAM solutions; AWS, Azure.
• Proficiency in scripting (PowerShell, Python, Bash) for automation and integration.
• Experience with remote administration using ssh or RDP.
• Experience with identity governance and administration (IGA) solutions is a plus.
• Security certifications such as CISSP, CISM, GIAC are preferred.
• We are primarily an in-office environment and therefore, you will be expected to work from the Prague,Czech Republic office in compliance with Pure’s policies, unless you are on PTO, or work travel, or other approved leave.

Salary ranges are determined based on role, level and location. For positions open to candidates in multiple geographical locations, the base salary range is reflective of the labor market across the applicable locations. 

This role may be eligible for incentive pay and/or equity. 

And because we understand the value of bringing your full and best self to work, we offer a variety of perks to manage a healthy balance, including flexible time off, wellness resources, and company-sponsored team events - check out purebenefits.com for more information. 

 #LI-ONSITE