<h2>Role Description</h2> The Security Team is seeking a highly skilled IAM Engineer with a strong focus on identity and access management to help drive our mission of securing user and workforce authentication at scale. This role is ideal for someone who thrives in solving complex challenges and has a passion for building robust, scalable identity solutions in dynamic engineering environments.  You’ll work hands-on with SailPoint, Okta and Okta Workflows to design and implement secure SSO integrations, manage access policies, and streamline identity automation across the enterprise. Experience with authentication protocols, identity lifecycle management, and SailPoint is essential, as you’ll play a key role in shaping the future of access control and enterprise identity at Dropbox. <h2>Responsibilities</h2> <ul> <li>Design, implement, and maintain secure identity and access management (IAM) solutions using Okta, Okta Workflows, and SailPoint to support scalable, automated, and auditable identity lifecycle management</li> <li>Lead SSO integration efforts for internal and third-party applications, ensuring secure authentication and seamless user experience across the enterprise</li> <li>Develop and enforce access control policies and governance models to meet security, compliance, and SOX certification requirements</li> <li>Support the onboarding of enterprise applications into Okta, including custom configuration, testing, and rollout to production</li> <li>Enhance and maintain synchronization services between identity sources and downstream systems using SailPoint IdentityNow and directory services</li> <li>Participate in incident response, troubleshooting, and resolution of identity-related issues across infrastructure and application stacks</li> <li>Contribute to the development of documentation, standards, and reusable templates for identity workflows and access reviews</li> </ul> <h2>Requirements</h2> <ul> <li>Okta Administration – Expertise in Okta platform, including Universal Directory, Okta Workflows, Lifecycle Management, and SSO integrations</li> <li>SailPoint IdentityNow – Hands-on experience configuring identity governance, access reviews, provisioning, and policy management</li> <li>Authentication Protocols – Strong understanding of SAML, OAuth, OIDC, and MFA</li> <li>Automation &amp; API Integration – Ability to build workflows and automations using tools like Okta Workflows, Python, or JavaScript, and comfort working with REST APIs</li> <li>Security &amp; Compliance – Familiarity with SOX, access certifications, and audit support for IAM environments</li> <li>5+ years of experience in identity and access management (IAM), with direct ownership of Okta and/or SailPoint implementations</li> <li>A Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field</li> </ul> <h2>Preferred Qualifications</h2> <ul> <li>3+ years of experience in identity and access management (IAM), with direct ownership of Okta and/or SailPoint implementations</li> <li>Hands-on experience with Okta Workflows, advanced SSO configurations, and lifecycle management</li> <li>Strong working knowledge of SailPoint IdentityNow, including identity governance, role management, and access certifications</li> <li>Relevant certifications such as Okta Certified Professional, Certified Identity and Access Manager (CIAM), CISSP, or Security+ are a plus</li> </ul> <h2>Compensation</h2><div><div><div>Canada Pay Range</div><div>$103,400—$139,800 CAD</div></div></div>