Security Engineer, IAM

Home > Python programming jobs

Security Engineer, IAM in Canada new

Dropbox
Full time
Email

Canada
11/10/2026
Report

Remote

Responsibilities

Design, deploy, and operate IAM controls across cloud and on-premises infrastructure.
Secure identity, authentication, and authorization for AI agents, services, workloads, automation, and other non-human actors.
Implement least-privilege controls using RBAC, ABAC, permission boundaries, service control policies, and just-in-time access.
Build integrations using SAML, OAuth, OpenID Connect, SCIM, and SPIFFE/SPIRE.
Automate identity lifecycle, joiner/mover/leaver, access review, and privileged-access workflows.
Develop identity guardrails with infrastructure-as-code and policy-as-code.
Build monitoring and alerting for anomalous authentication, privilege escalation, credential misuse, and unauthorized access.
Partner with Incident Response on identity-related investigations and compromised-access revocation.
Conduct security reviews and threat modeling for identity architectures and integrations.
Maintain reliable IAM services with documentation, operational ownership, and on-call support.

Requirements

At least 5 years of security engineering experience, including substantial IAM or identity-security experience.
Hands-on experience with Okta, Okta for AI Agents, SailPoint, or comparable technologies.
Strong knowledge of authentication, authorization, least privilege, zero trust, and identity lifecycle management.
Experience with SAML, OAuth 2.0/2.1, OpenID Connect, SCIM, and MFA.
Experience designing RBAC or ABAC authorization models.
Experience securing human and non-human identities, including services, workloads, automation, and CI/CD systems.
Experience with agentic frameworks and MCP tool integration.
Experience implementing access reviews, privileged-access controls, and joiner/mover/leaver workflows.
Proficiency in at least one programming or scripting language such as Python, Go, Java, Ruby, or Bash.
Experience with infrastructure-as-code, policy-as-code, APIs, and security automation.
Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
Preferred qualifications include SPIFFE/SPIRE, Kubernetes service accounts, cloud workload identity, AI-agent security, privileged-access platforms, identity threat detection, multi-account cloud IAM, NIST and CIS guidance, SOC 2, ISO 27001, FedRAMP, CISSP, CCSP, and identity or security community contributions.

Benefits

Canada pay range is CAD $191,300–$258,700 annually.
Teams with on-call rotations require engineers to be available during core and non-core business hours.

Dropbox

Dropbox is a popular cloud file storage or file hosting service. It enables individual users and businesses to store, locate, manage, and share digital assets from a centralized location. Dropbox allows users to save files within online folders and sync them across devices.

Similar positions

Senior Cyber Security Engineer

Berkshire Hathaway Homestate Companies
Full time

USA
11/10/2026
Salary: $155k - $189k/yr

Sacramento, CA

Cloud Security Engineer - DevSecOps

CME Group
Full time

UK
11/10/2026
Salary: Competitive

Belfast

Senior Engineer, System Automation (Subsystems)

PsiQuantum
Full time

USA
11/10/2026
Salary: $141k - $237k/yr

Milpitas, CA

Senior Software Engineer, Scanning Engine

Coalition, Inc.
Full time

Canada
11/10/2026
Salary: C$135k-C$200k

Remote

ML Engineer, Retrieval & Grounded Generation

Red Cell Partners
Full time

USA
11/10/2026
Salary: $135k-$170k

Remote