# Lead IAM Engineer at Offerfit

- Company: Offerfit
- What the company does: Deliver 1:1 personalization with BrazeAI Decisioning Studio™. Use all your first-party data to maximize impact and create experiences unique to every customer. Backed by Menlo.
- Company website: https://offerfit.ai/
- Type: Startups (AI role)
- Level: Senior
- Location: Chicago
- Work setup: On-site
- Posted: 2026-09-15
- Apply by: 2026-10-30
- Apply: https://job-boards.greenhouse.io/braze/jobs/8205056
- Page: https://www.1752.vc/careers/jobs/offerfit-lead-iam-engineer/

## About the role

We’re seeking a Lead IAM Engineer to own the technical direction and evolution of our enterprise identity and access management strategy. In this senior individual contributor role, you’ll architect, build, and continuously improve a secure, scalable, and automated identity ecosystem centered on Okta, identity lifecycle, access governance, and automation.

## What they're looking for

- Deep hands-on expertise with Okta in a complex enterprise environment, including SSO, Lifecycle Management, Authentication, MFA, Workflows, and Identity Governance
- Advanced understanding of SAML, OIDC, OAuth 2.0, SCIM, federation, provisioning, authentication, and authorization
- Experience automating employee onboarding, role changes, and offboarding using an HRIS such as Workday as the authoritative source for employee data
- Strong experience with identity governance including access reviews, entitlement management, access requests, role-based access control, and least privilege
- Strong scripting and automation skills using Python, PowerShell, or similar languages
- Strong API integration experience and the ability to connect identity platforms with broader enterprise systems

Tags: Information Technology