Staff IAM Engineer (IAM Architecture & Governance)

Key Responsibilities Identity Governance & Compliance Serve as the primary SME for the design, execution, and continuous improvement of human Identity Governance initiatives. Partner directly with internal and external audit teams, Risk, and Compliance to provide evidence, answer technical inquiries, and remediate audit findings. Translate complex compliance frameworks (e.g., SOX, SOC2, ISO 27001) into actionable IAM technical controls for both human and machine identities. Introduce and build automation platforms to mitigate automated tasks, while ensuring compliance/audit requirements are met. Non-Human Identity (NHI) Strategy & Development Define and execute the enterprise strategy for managing and securing Non-Human Identities (service accounts, API keys, OAuth tokens, secrets, and certificates) across multi-cloud and on-premise environments. Evaluate and implement modern NHI and secrets management platforms (e.g., Entro, Oasis, Zuma). Establish mechanisms to enforce strict lifecycle governance for NHIs, ensuring they are subject to the same rigorous oversight, ownership attribution, and review processes as human accounts. Identify, vault, and manage unmanaged or hardcoded secrets embedded in source code and CI/CD pipelines. Automation & Continuous Improvement Manual processes introduce risk and fatigue. A core objective of this role is to ruthlessly automate IAM governance and NHI operations to improve security, speed, and developer experience. NHI Discovery & Rotation : Develop automated workflows to continuously discover orphaned NHIs, alert on anomalous machine-to-machine behavior, and enforce automated secret rotation without disrupting production workloads. Automated Campaign Generation : Script and configure Saviynt to automatically trigger targeted micro-certifications based on high-risk events (e.g., department transfers, title changes). Zero-Touch Provisioning/Deprovisioning : Build workflows that instantly revoke access upon termination and automatically provision baseline access for new hires or newly spun-up microservices. API Integrations : Utilize REST APIs, Python, Go, or PowerShell to connect siloed applications to our centralized governance and NHI platforms, automating access visibility where native connectors do not exist. Qualifications Experience: 8+ years of dedicated experience in Identity & Access Management, with a balanced focus on IGA platforms and secrets/machine identity management. NHI & Development Expertise: Hands-on engineering and development experience with modern NHI lifecycle tools (Entro, Oasis, Zuma) and secrets management. Strong coding/scripting skills (Python, PowerShell, Go) are required. Saviynt: Administrative experience with Saviynt (EIC/Cloud). Audit Fluency: Strong track record of facing auditors and communicating technical IAM concepts to non-technical risk teams. Deep IAM Knowledge: Comprehensive understanding of core IAM concepts (SSO, MFA, SAML, OIDC, Active Directory, PAM, RBAC/ABAC). Recruitment Process and Others Recruitment Process Application Review - 1st Interview - 2nd Interview - Offer The exact nature of the recruitment process may vary according to the specific job and may be changed due to scheduling or other circumstances. Interview schedules and the results will be informed to the applicant via the e-mail address submitted at the application stage. Details to Consider This job posting may be closed prior to the stated end date for application if all openings are filled. Coupang has the right to rescind an offer of employment if a candidate is found to have submitted false information as part of the application process. Those eligible for employment protection (recipients of veteran’s benefits, the disabled, etc.) may receive preferential treatment for employment in accordance with applicable laws. Job titles and responsibilities may be subject to change depending on the candidate’s overall experience, etc. This will be communicated to the candidate at the appropriate time before the offer. Hiring may be restricted in case the legal qualifications required for hiring and work performance is not met. This is a full-time regular position and includes 12 weeks of probation period; provided, however, the probationary period may be either skipped, shortened or extended if necessary for business purposes Privacy Notice Your personal information will be collected and managed by Coupang as stated in the Application Privacy Notice located below. https://privacy.coupang.com/en/land/jobs/ Document Return Policy This notification is given pursuant to Article 11 (6) of the Fair Hiring Procedure Act. A job applicant, who has applied but not been finally selected for a position at Coupang (the “Company”), may request the Company to return his/her hiring documents submitted pursuant to the Fair Hiring Procedure Act. However, this will not apply where the hiring documents were submitted via the website of the Company or e-mail, or where the job applicant submitted those documents voluntarily without a request from the Company. In addition, if the hiring documents were destroyed due to a natural disaster or any other reasons not attributable to the Company, such documents will be deemed to have been returned to the job applicant. A job applicant who wishes to request the return of his/her hiring documents pursuant to the main sentence of paragraph 2 above should fill out a “Request for Return of Hiring Documents” [Annex Form No. 3 in the Enforcement Rule of the Fair Hiring Procedure Act] and submit It by email (recruitingops@coupang.com). In such case, within fourteen (14) days from the date of identifying the receipt of the request, the Company will send the hiring documents to the job applicant’s designated address via registered mail. Please be informed that the job applicant is required to pay the postage on the registered mail. In preparation for a job applicant’s request for the return of hiring documents pursuant to the main sente