Joblaze summary

The Staff Identity and Access Management Engineer at Tanium is responsible for designing and managing IAM and IGA solutions, ensuring the security and compliance of the identity ecosystem. This role requires expertise in IAM technologies, particularly with tools like Entra ID and Active Directory, as well as scripting skills in PowerShell. Ideal candidates will have 8-10 years of experience in identity management, making this position suitable for seasoned professionals looking to lead technical projects and mentor others in a collaborative environment.

Joblaze insights

Listed about 2 months ago — first seen on Joblaze September 3, 2026. Last confirmed on Tanium's careers page November 8, 2026.
Salary band is in line with the typical range for Security roles (median ~$170,000).
Starts above 18% of 93 comparable staff security roles in United States we track (median $210,000 across 46 companies).
ISO 27001 appears in 3.9% of 127 comparable staff security roles in United States; FedRAMP appears in 0.8% of 127 comparable staff security roles in United States.

Quick facts

Is the Staff Identity and Access Management Engineer role remote?: It's hybrid — Tanium expects some on-site time in Addison, TX (Hybrid); Bellevue, WA (Hybrid); Durham, NC (Hybrid); Emeryville, CA (Hybrid); Reston, VA (Hybrid).
What's the salary range?: Tanium lists $180,000–$230,000 for this role.
How much experience is required?: 8–10 years of relevant experience for this Staff Identity and Access Management Engineer role.
Where is the role based?: Tanium is hiring for this position in Addison, TX (Hybrid); Bellevue, WA (Hybrid); Durham, NC (Hybrid); Emeryville, CA (Hybrid); Reston, VA (Hybrid).
What's the tech stack?: Joblaze extracted these technologies from the posting: FedRAMP, GDPR, HIPAA, ISO 27001, Identity and Access Management, Multi-Factor Authentication.
What seniority level is this role?: Tanium targets staff-level candidates for this position.
Is this full-time or contract?: Full-time for this Staff Identity and Access Management Engineer role at Tanium.

From the original posting

The Basics

We're looking for a Staff IAM engineer to design, implement, and manage identity and access management (IAM) and identity governance (IGA) solutions across Tanium's corporate infrastructure. You'll evaluate new IAM/IGA technologies, partner with cross-functional teams on strategy, and keep our identity ecosystem secure, compliant, and efficient.

This position follows the Company’s hybrid schedule which currently requires employees to work in the office at one of the following locations a minimum of three days per week: Addison, TX; Bellevue, WA; Durham, NC; Emeryville, CA; or Reston, VA.

What you'll do

Design and manage IAM/IGA solutions across corporate infrastructure, including SSO, MFA, and PAM
Build and maintain identity automation - onboarding, off-boarding, entitlements, and approval workflows - and troubleshoot issues surfaced by testing, user, or peer feedback
Own the identity lifecycle: monitor, document, and continuously improve it
Partner with GRC to develop and maintain IAM/IGA policies and standards that satisfy regulatory requirements (ISO 27001, FedRAMP, GDPR, HIPAA, etc.)
Assess IAM systems regularly for security gaps and insure ongoing patch and policy compliance
Lead technical delivery on IAM/IGA projects - upgrades, migrations, integrations - and monitor system performance to identify optimizations
Respond to and resolve IAM-related incidents
Mentor engineers across IT and Security and track industry trends to keep our IAM/IGA approach current
Maintain system design documentation

We’re looking for someone with

Education
- Bachelor's Degree in Computer Science, IT or other relevant degree or equivalent work experience
Experience
- 8–10 years in identity and access management, including IGA integrations with HRIS systems (Workday, SuccessFactors, or similar)
- Experience implementing, configuring, and managing an IGA product like Lumos, SailPoint, Saviynt, etc
- Hands-on expertise with Entra ID and Active Directory (preferably in a hybrid environment) with respect to identity and access
- Solid grasp of onboarding/off-boarding standards and lifecycle workflows
- Scripting proficiency (PowerShell)
- Working knowledge of security/compliance frameworks - ISO 27001, FedRAMP, GDPR, HIPAA
- Experience with SSO, MFA, and PAM tooling
- Strong problem-solving skills and the communication chops to work across IT, Security, and business teams
Other
- Comfortable working independently and juggling multiple priorities in a fast-paced environment

About Tanium

On a mission. Together.

We are an organization with stakeholders around the world and it’s imperative that the diversity of our customers and communities is reflected internally in our team members. We strive to create a diverse and inclusive environment where everyone feels they have opportunities to succeed and grow because we know that only together can we do great things.

What you’ll get

The annual base salary range for this full-time position is $180,000 to $230,000. This range is an estimate for what Tanium will pay a new hire. The actual annual base salary offered may be adjusted based on a variety of factors, including but not limited to, location, education, skills, training, and experience.

Tanium is an Equal Opportunity and Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, gender identity, sexual orientation, disability, protected Veteran status, or other legally protected categories. If you require a reasonable accommodation in searching for a job opening, completing an application, interviewing, or completing any pre-employment testing or requirements, please contact accommodations@tanium.com. For more information refer to the “Know Your Rights” poster which is available here - https://www.eeoc.gov/poster.

Standard company text repeated across Tanium's postings is omitted here.

Staff Identity and Access Management Engineer

Similar positions