Roku
Senior Identity Access Management Engineer
San Jose, California · Senior
Sponsorship not specified$158k-$279kDetected 6 hours ago
PowerShellAzureCloud PlatformsDevOpsOAuthAgentic AIJiraZero TrustCommunicationCollaboration
About the role
- From your first day at Roku, you'll make a valuable - and valued - contribution.
- We're a fast-growing public company where no one is a bystander.
- The ideal candidate has hands-on experience in identity and access management (IAM) and securing cloud environments within the Microsoft ecosystem, with deep expertise in Azure Entra ID.
Responsibilities
- Lead enterprise-wide IAM standardization, including identity lifecycle, access governance, and policy enforcement across global regions.
- Drive automation across IAM to streamline administration and deliver a smoother user experience.
- Support enterprise applications onboarding into Azure Entra ID, including SSO, Conditional Access, and role-based access control (RBAC).
- Enhance privileged access management and implement scalable monitoring, alerting, and auditability solutions to support a secure, geographically distributed workforce.
- Collaborate with IT, Networking, and Security teams to troubleshoot identity-related issues and support global infrastructure initiatives.
- Build identity automation with a DevOps mindset, writing scripts, developing pipelines, and engineering tooling from scratch rather than just configuring them.
Requirements
- 8+ years of hands-on experience with identity and access management and automating cloud technologies, particularly within the Microsoft ecosystem.
- Deep experience with Microsoft Entra ID, including Conditional Access, Identity Governance, and Privileged Identity Management.
- Strong understanding of multi-factor authentication and FIDO2.
- Experience with backup and recovery strategies for identity-related services.
- We're excited if you have
Compensation
- For California Only - The estimated annual salary for this position is between $158,000 - $279,000 annually.
This listing is sourced directly from Roku's careers page and normalized into a canonical job model.