Lead Identity & Access Management Engineer at Koch

Language

Location: Zapopan, Jalisco
Type: Full-time
Level: lead/mgmt
Added to Metaintro: Sep 25, 2026

Description

Koch is hiring a Lead Identity & Access Management Engineer to lead the global identity strategy, architecture, and platforms. The role covers authentication, federation, authorization, identity governance, lifecycle automation, secure access, Zero Trust, incident response, and engineering of IAM platforms and integrations. It requires an in-office presence in Zapopan, Jalisco, and extensive experience with identity protocols, cloud identity services, Python or TypeScript, Terraform, CI/CD, and enterprise governance platforms.

Required Skills

SAML2
OAuth2/OIDC
FIDO2
Python
TypeScript
Terraform
SCIM
CI/CD
Zero Trust

Additional Information

Required Previous Experiences: Extensive experience owning identity platforms at scale with deep protocol-level expertise across SAML, OAuth2/OIDC, SCIM, FIDO2/passkeys, LDAP, and Kerberos.
Hands-on architecture across Azure Entra ID, AWS IAM, or Google Cloud Identity, including cross-cloud federation and hybrid identity patterns.
Practical experience designing and building infrastructure across Azure, AWS, or GCP.
Strong coding skills in Python and/or TypeScript, with API integrations, Git, CI/CD, and automated testing.
Delivery of identity configuration as versioned, testable code using Terraform or similar technologies.
Hands-on experience integrating diverse applications with enterprise governance platforms and delivering JML automation, RBAC/ABAC/PBAC models, and access workflows.
Preferred Qualifications: Experience building multi-step user journeys for Workforce, CIAM, and partner ecosystems using PingOne DaVinci or Okta Workflows.
Hands-on development and design experience with SailPoint IdentityNow/IdentityIQ or an equivalent platform.
Real-time detection and response to identity-based threats using IdP, directory, SIEM, and SOAR signals.
Translation Company Name: Koch