Systems Engineer (IAM)

Product Overview:

Vuori is re-defining what athletic apparel looks like: built to move and sweat in but designed with a casual aesthetic to transition into everyday life.  Our high energy, fast paced office environment is reflected in the clothes we make.  We aim to inspire others to take on all aspects of their lives with clarity, enthusiasm, and purpose…. while having a lot of fun along the way. We are proud to be an outlet for opportunity of personal growth and success.

Role Overview

As an IAM Engineer specializing in Identity and Access Management (IAM), you will lead the support, implementation, and ongoing management of IAM services across the organization.

Using Entra ID as the core IAM platform, you will drive secure and efficient management of user identities, access controls, and permissions. You will leverage Single Sign-On (SSO) and System for Cross-domain Identity Management (SCIM) to streamline access to third-party applications, improving both security and user experience.

In this role, you will also support HRIS and other enterprise IAM-integrated applications, oversee API management activities that enable identity integrations and automation, maintain SOP documentation, and manage an operational support ticket queue for IAM services.

Key Responsibilities

• Implement and maintain IAM policies, procedures, and standards across all applications and roles, with a focus on Entra ID
• Design and manage Role-Based Access Control (RBAC) models to ensure appropriate access permissions
• Oversee user lifecycle management (provisioning, de-provisioning, role assignment) for employees, contractors, and partners
• Implement and manage Single Sign-On (SSO) solutions for secure access to third-party applications
• Leverage SCIM to automate user provisioning and de-provisioning across applications
• Implement authentication and authorization mechanisms, including Multi-Factor Authentication (MFA) and other advanced security controls
• Ensure compliance with regulatory requirements and internal IAM governance policies
• Respond to and mitigate IAM-related security incidents (e.g., unauthorized access, policy violations)
• Conduct regular IAM audits, generate compliance reports, and address identified gaps
• Collaborate with IT, Security, and Engineering teams to integrate IAM into systems and applications
• Stay up to date with IAM best practices, emerging trends, and technologies
• Support HRIS and other enterprise IAM-integrated applications by:
  • Partnering with system owners to maintain access models
  • Troubleshooting authentication and provisioning issues
  • Ensuring reliable user lifecycle processes
• Provide API management support for identity integrations and automation, including:
  • Secure API authentication and authorization
  • Token flows and service principals
  • Collaboration with engineering teams for system connectivity
• Develop and maintain IAM SOP documentation (runbooks, how-to guides, standards, troubleshooting procedures)
• Manage the IAM support ticket queue, including: triage, prioritization, communication, SLA adherence, root-cause analysis, and coordination of remediation

Qualifications

• 5+ years of experience in IAM or related fields, with ownership of enterprise IAM services and access management at scale
• Strong knowledge of IAM concepts and standards, including RBAC, SSO, SCIM, MFA, LDAP, SAML, OAuth
• Experience supporting HRIS and SaaS applications with IAM integrations, including joiner/mover/leaver processes and provisioning workflows
• Working knowledge of API management and secure integration patterns (REST, OAuth2/OIDC, JWT, client credentials flows)
• Extensive experience with Entra ID or similar IAM platforms (e.g., Okta, Azure AD, SailPoint, Ping Identity)
• Proficiency in scripting/programming languages (e.g., Python, PowerShell, Java) for automation and reporting
• Experience with AI tools (e.g., Copilot, Claude, GPT, etc.) is a plus
• Strong understanding of security principles and regulatory requirements related to IAM
• Strong analytical, problem-solving, and communication skills
• Relevant IAM certifications (e.g., Microsoft Entra / Azure certifications) are highly desirable

We offer:

• We welcome new ideas and allow you to make an immediate impact on the team.
• Flexible Paid time off (PTO for any reason, including sick days (no specified limits) and flexible work schedule.
• Personal laptop.
• Health/Sport Budget.
• Fully remote.