Hybrid IAM Engineer

at Crypto.com

• Job title: IAM Engineer
• Job type: Full Time
• Experience level: Mid level, Senior
• Salary: Not specified
• Degree requirement: Bachelor's Degree
• Tech skills: AWS, Python, Terraform
• Location requirements: Hybrid, Taipei, Taiwan

About the role

• Mid-Level IAM Engineer focusing on Agentic AI management for Identity Security Team at Crypto.com. Joining a team dedicated to leveraging security technologies for user protection.

Responsibilities

• Identity Ecosystem Management: Manage and optimize a suite of core identity platforms (including Okta and Microsoft Entra ID), driving the end-to-end lifecycle for users and services
• Automation & Scripting: Build and maintain scripts (Python, Bash) to automate complex identity workflows, eliminate manual provisioning, and enhance operational efficiency
• Modern Workflow: Integrate AI technologies and LLMs into your daily process to accelerate development, analyze security logs, and maintain high-quality technical documentation
• Infrastructure Access Governance: Define and manage access patterns for infrastructure-level assets. This includes governing access to servers, databases, and clusters using tools like Teleport and AWS-native IAM
• Secure Access Engineering: Partner with DevOps to implement the principle of least privilege, focusing on the use of short-lived credentials and Just-in-Time (JIT) access for infrastructure environments
• Governance Enablement: Support the Governance team by automating and optimizing the access review process; you will build the technical workflows and reporting tools that enable efficient, data-driven compliance campaigns
• Compliance Standards: Ensure technical configurations across all tools adhere to SOC2/ISO27001 standards and assist in technical evidence collection for audits

Requirements

• 3–5 years of progressive experience managing enterprise-scale identity solutions
• Proven ability to manage and integrate multiple security tools simultaneously (e.g., Identity Providers, Access Management platforms, and Secrets Management solutions)
• Hands-on experience governing access and building automations within AWS. You should be familiar with AWS IAM, cross-account access patterns, and leveraging AWS services (e.g., Lambda, EventBridge) for security workflows
• Strong proficiency in Python or Bash with a track record of using APIs to automate security tasks
• Deep understanding of SAML, OAuth2, OIDC, and SCIM
• Strong troubleshooting skills and the ability to solve complex, systemic identity and access issues
• Experience with modern Privileged Access Management (PAM) platforms (e.g., Teleport) or Secrets Management solutions (e.g., AWS Secrets Manager)
• Practical experience using AI tools (e.g., GitHub Copilot, ChatGPT/LLMs) to enhance productivity and code quality
• Familiarity with Terraform or AWS CloudFormation for managing identity-related infrastructure
• Ability to articulate technical security requirements to stakeholders and engineering teams

Benefits

• Competitive salary
• Medical insurance package with extended coverage to dependents
• Attractive annual leave entitlement including: birthday, work anniversary
• Work Flexibility Adoption. Flexi-work hour and hybrid or remote set-up
• Aspire career alternatives through us. Our internal mobility program can offer employees a diverse scope.
• Work Perks: crypto.com visa card provided upon joining