IAM Software Engineer II

About the role and team Sec Eng at Keystone AI means building for real-world impact under real-world constraints. The Identity and Access Management ( IAM ) team is currently driving a high-stakes transformation of our governance systems and microservices, moving away from legacy polished pictures toward adaptive, AI-driven security models. You will design and build the extensible features, APIs, and workflows that manage authentication and authorization for Keystone AI's global internal workforce and services. We are looking for a Security Engineer who stays calm under pressure and possesses the grit to own a project from the first design doc to debugging production issues at scale. If you are energized by the challenge of bridging digital security with real-world movement and want to lead the adoption of industry-leading trends like RAG and MCP in the identity space, this is where you will grow. What you'll do Design, build, and maintain centralized access management systems and risk models where performance, security, and scale are inseparable. Solve messy, high-impact identity problems (such as birthright provisioning and access certifications) often without a clear starting point. Own your work end-to-end, from writing high-quality engineering design documents to managing critical platform changes using Terraform and standard build code. Champion software engineering best practices like code health, testing, and design clarity even when project stakes and pressure are high. Collaborate across disciplines to integrate SSO applications and middleware technologies while acting as the technical voice of the identity team. Navigate technical debt and legacy complexity within LDAP, MFA, and distributed database systems to unblock developer productivity. Basic Qualifications Senior/Staff seniority in the development, design, and consulting of SailPoint IIQ or similar IGA and authentication platforms. Experience building and documenting high-quality code for complex software systems scaling to millions of users. Proficiency with large-scale distributed storage and SQL database systems such as MySQL. Strong understanding of Role-Based Access Control (RBAC), Policy-Based Access Control (PBAC), and Attribute-Based Access Control (ABAC). Education requirement: Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent experience). Preferred Qualifications Working experience in DevOps, Linux, Puppet, and infrastructure automation to improve system reliability. Experience leveraging AI/ML, prompt engineering, or MCP to build innovative identity solutions or resolve operational bottlenecks. Technical certifications in SailPoint , Google Cloud, or Microsoft security architectures. Demonstrated ability to use CSS and JavaScript to build or customize complex front-end interfaces for security tools. Experience using developer productivity tools like Cursor or GitHub Copilot to optimize the software development lifecycle. ~~ ~~ Ready to Ride? This isn't the kind of place where you follow a playbook - it's where you help write one. If you're driven by impact, energized by challenge, and ready to shape how the world moves - we'd love to hear from you. You may be eligible for bonuses, equity, and other compensation, as well as a range of benefits. Explore our benefits. Offices remain key to collaboration and Keystone AI's culture. Unless approved for full remote work, employees must spend at least 50% of their time in-office. Some roles, like those at greenlight hubs, require full-time in-office presence. Ask your Recruiter for details about this role's requirements. Keystone AI is proud to be an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. If you have a disability or special need that requires accommodation, please let us know by completing this form.