Senior Security IAM Engineer

• Own and evolve Scopelys modern IAM architecture to support a dynamic cloudnative environment across AWS GCP and SaaS applications
• Design and implement federated identity management (OIDC SAML SCIM) and rolebased access control (RBAC) / attributebased access control (ABAC) across internal and external platforms
• Develop scalable access automation solutions for developer selfservice leastprivilege access and ephemeral credentials
• Build and manage enterprisewide authentication and authorization strategies leveraging modern identity providers like Okta AWS IAM Identity Center and Google Cloud IAM
• Partner with security and engineering teams to implement zerotrust principles and enforce adaptive access controls
• Automate provisioning deprovisioning and access audits with InfrastructureasCode (Terraform Pulumi) and identity workflows
• Lead IAM threat modeling access reviews and anomaly detection to proactively identify misconfigurations or abuse
• Drive adoption of passwordless authentication MFA everywhere and justintime access to minimize risk
• Collaborate with compliance and security teams to ensure IAM policies align with regulatory requirements (SOC2 ISO27001 etc.
• Serve as a subject matter expert on identity security mentoring other engineers and influencing security strategy
• Collaborate with game teams to align workforce and gaming IAM strategies ensuring seamless integration security and compliance across all identity and access management initiatives

• Experience working at a startup or highscale technology company (FANG unicorn or fastgrowth SaaS)you understand how identity needs to scale
• Deep expertise in modern IAM principlesfederation finegrained access controls identity lifecycles and zerotrust authentication
• Strong knowledge of cloud IAM modelsAWS IAM Google Cloud IAM Azure AD and their best practices for securing largescale environments
• Proficiency in at least one programming/scripting language (Python Go TypeScript or similar) for automating IAM workflows
• Handson experience with OAuth2 OIDC SAML SCIM and integrating identity providers (Okta Auth0 AWS IAM Identity Center Google Workspace)
• Ability to build and manage IAM automation pipelines using InfrastructureasCode (Terraform Pulumi) and CI/CD workflows
• Familiarity with JustinTime access management (JIT) ephemeral credentials (AWS STS Google Workload Identity) and sessionbased security
• Comfortable working with largescale distributed systems and developerfriendly IAM modelsyou know how to support an engineering culture without excessive friction.
• A strong threat modeling and security mindset with the ability to anticipate risks and proactively mitigate IAMrelated attack vectors
• Understanding of Identity and Access Governance and how it can apply in a fastgrowth highscale environment
• Strong ability to effectively communicate complex IAM concepts risks and solutions to both technical and nontechnical stakeholders ensuring alignment with business and security objectives

Must Haves:

• Bachelors degree in Computer Science Information Security or equivalent experience.
• 5 years of handson IAM security engineering experience in a cloudfirst highscale environment
• Experience designing IAM architectures for global organizations with complex access needs.
• A modern approach to IAMyou embrace automation least privilege and identityaware security rather than legacy solutions
• Experience implementing and operating IAMrelated security tools such as AWS IAM Access Analyzer Google Cloud Policy Intelligence Okta Workflows and CIEM (Cloud Infrastructure Entitlement Management) platforms
• You have worked in a fastgrowth startup or a highscale tech company and thrived.
• You are comfortable navigating ambiguity and making datadriven security decisions without requiring explicit direction

Bonus Points for:

• Experience with passwordless authentication (WebAuthn FIDO2.
• Previous work securing B2B or B2C authentication flows
• Contributions to opensource IAM or security tooling
• Building developerfriendly IAM automation tools that streamline security without adding excessive friction

About Us

Scopely is a global interactive entertainment and mobilefirst video game company home to many top awardwinning experiences such as MONOPOLY GO! Star Trek Fleet Command Stumble Guys MARVEL Strike Force and Yahtzee With Buddies among others.

Scopely creates publishes and liveoperates immersive games that empower a directedbyconsumer experience across multiple platformsfrom mobile web PC and beyond.

Founded in 2011 Scopely is fueled by a worldclass team and a proprietary technology platform Playgami that supports one of the most diversified portfolios in the games industry.

Recognized multiple times as one of Fast Companys Worlds Most Innovative Companies Scopely is a multibilliondollar business due to its ability to create longlasting game experiences that players enjoy for years.

Scopely has global operations in more than a dozen markets across Asia EMEA and North America and is home to many internal game development teams referred to as Scopely Studios with additional game studio partners across four continents.

Scopely was acquired by Savvy Games Group in July 2023 for $4.9 billion and is now an independent subsidiary of Savvy.

For more information on Scopely visit: scopely