SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Aurora is building self-driving technology to transform mobility and logistics. We're seeking a Senior Identity Management Engineer to lead the technical implementation of our modern identity ecosystem. You'll be the primary execution engine responsible for implementing newly licensed IAM tools (Conductor One and Ping Directory) while working closely with our IAM Architect.
Our identity stack is built on Zero Trust principles, featuring SPIRE, Open Policy Agent (OPA), and a custom-built group management engine. In this role, you'll own the full IAM lifecycle and evolve our existing infrastructure into a scalable, modern ecosystem that serves as a competitive advantage for our operations.
Key responsibilities include:
- Complete baseline environment configuration for Ping Directory and Conductor One across Dev and Prod tiers
- Integrate HRIS (Workday) with the IGA platform to automate Joiner-Mover-Leaver (JML) processes
- Build and validate production-ready connectors for the core ecosystem, including Okta, AWS, Google, Slack, and Squad
- Deploy "Justify or Revoke" workflows and automated reporting to support SOX/ISO privileged access reviews
- Execute migration of Workforce and Service identities to Ping Directory
- Define technical test plans, draft procedural documentation for audits, and create system runbooks for the operations team
Required qualifications:
- 4+ years in Information Security with at least 2 years implementing IAM solutions in large enterprise environments
- Expert-level knowledge of at least one major Cloud Identity Provider (AWS IAM, Azure) and core protocols including SAML, OAuth 2.0, OIDC, SCIM, and LDAP
- Deep understanding of Zero Trust principles and access models (RBAC, ABAC, PBAC)
- Bachelor's or Master's degree in Computer Science, IT, or equivalent practical experience
- Ability to develop code in Python or Go
Desirable qualifications include experience with IdPs (Okta, Auth0, Microsoft Entra ID), IGA/PAM platforms (Conductor One, SailPoint, Saviynt), Ping Directory or similar LDAP solutions, AWS cloud infrastructure, Kubernetes, Infrastructure-as-Code (Terraform, Helm), CI/CD platforms (ArgoCD), and API security using OAuth scopes and claims.
