SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Scopely, a leading video game and interactive entertainment company (home to MONOPOLY GO!, Pokémon GO, Stumble Guys, and others), is seeking a Senior IAM Security Engineer to join the Information Security team. This is a highly technical, hands-on role focused on building, scaling, and securing Scopely's identity and access management ecosystem across cloud, SaaS, AI, and remote access environments.
Key Responsibilities:
Build and Evolve Modern IAM Architecture: Design and evolve IAM architecture to support high-scale, cloud-first environments across AWS, GCP, SaaS applications, AI tooling, and remote access platforms. Lead initiatives around federated identity (SAML, OIDC, OAuth, SCIM), workforce identity patterns, least-privilege role design, RBAC/ABAC models, centralized access using Okta and AWS IAM Identity Center, cross-account access patterns, service account governance, and Zero Trust identity design.
Own Terraform-Based IAM and Access Automation: Own and improve Terraform-based IAM automation across Scopely's cloud and identity environment. Design, build, and maintain reusable Terraform modules for IAM roles, policies, permission sets, and access patterns. Implement Terraform workflows for Okta app assignments, group-based access, and IAM Identity Center automation. Ensure mature Terraform engineering practices around state management, drift detection, rollback planning, and safe production promotion.
Automate Identity and Access Workflows: Build scalable automation for identity lifecycle management, access requests, entitlement changes, and access reviews. Design provisioning/deprovisioning automation, access request workflows, group-based access assignment, Okta app integration automation, IAM Identity Center permission set automation, self-service identity workflows, and identity reporting pipelines. Work with Terraform, Python, Bash, PowerShell, APIs, CI/CD systems, Okta Workflows, ServiceNow integrations, and AI tools (Claude Code, Codex).
Strengthen Identity Security and Risk Reduction: Lead initiatives to reduce identity-related risk across human and non-human identities. Design and implement controls for excessive permissions reduction, service account hardening, long-lived credential reduction, cross-account trust policy hardening, permission boundary enforcement, role lifecycle management, just-in-time privileged access, break-glass workflows, and identity anomaly detection. Use AWS IAM Access Analyzer, CloudTrail, GuardDuty, GCP-native services, Okta System Log, CIEM, and CSPM platforms.
Improve Zero Trust and Privileged Access Security: Partner with IAM, platform, and security teams to strengthen Zero Trust and privileged access controls. Support Twingate connectors, identity-aware remote access, Zero Trust segmentation, privileged access workflows, PAM platform integrations (Britive), adaptive access controls, MFA and passwordless adoption, and federated access into AWS, GCP, SaaS, and internal tools.
Support Identity Investigations, Monitoring, and Audit Readiness: Partner with Security Operations, Compliance, and Infrastructure teams to improve identity monitoring and audit readiness. Build IAM troubleshooting runbooks, identity-related detection workflows, access review processes, permission reporting, and IAM logging/monitoring design. Support investigations involving suspicious access, identity abuse, misconfigured integrations, broken federation, risky SaaS integrations, and service account misuse. Ensure SOC 2 and ISO 27001 alignment.
Build AI-Assisted Identity Security Workflows: Design and improve AI-assisted, automation-first workflows for scaling identity security. Lead initiatives around AI-assisted access review analysis, troubleshooting support, intelligent triage, security chatops integrations, identity workflow automation using agents, internal copilots for IAM operations, and AI-assisted remediation recommendations. Work with Claude Code, MCP-based workflows, and agentic automation patterns.
Requirements:
The posting excerpt provided does not include a dedicated requirements section. Candidates should review the full posting for specific experience requirements, technical skills, and qualifications.
