Build and Evolve Modern IAM Architecture
•
Design and evolve Scopely’s IAM architecture to support a high-scale, cloud-first environment across AWS, GCP, SaaS applications, AI tooling, and remote access platforms.
•
Federated identity architecture using SAML, OIDC, OAuth, and SCIM
•
Workforce identity and access patterns across internal platforms
•
Least-privilege role design and access segmentation
•
RBAC and ABAC models for cloud and SaaS environments
•
Centralized access models using Okta, AWS IAM Identity Center, Google Cloud IAM, and cloud-native IAM services
•
Secure cross-account and cross-project access patterns
•
Service account, workload identity, and non-human identity governance
•
Zero Trust identity and access control design
Partner with engineering, infrastructure, and security teams to:
•
Standardize secure identity and access patterns
•
Reduce identity sprawl and excessive permissions
•
Improve access visibility and auditability
•
Build scalable identity controls for a fast-moving engineering environment
Own Terraform-Based IAM and Access Automation
•
Own and improve Terraform-based IAM and access automation across Scopely’s cloud and identity environment.
Design, build, and maintain:
•
Reusable Terraform modules for IAM roles, policies, permission sets, group mappings, and access patterns
•
Terraform workflows for Okta app assignments, group-based access, and IAM Identity Center automation
•
Standardized access modules that can be reused safely across teams and environments
•
Policy-as-code patterns for least privilege and permission boundary enforcement
•
Terraform-driven onboarding and offboarding flows for identity-related systems
•
Automation for service account and workload identity provisioning
•
Access reporting and audit visibility pipelines connected to code-based IAM workflows
•
Standardization of IAM modules, variables, role definitions, and policy structures
•
Repeatability and consistency of access changes
•
Reduction of manual IAM operations
•
Auditability and change traceability
•
Safe rollout of identity changes through code review and pull request workflows
Ensure mature Terraform engineering practices around:
•
Drift detection and remediation
•
Blast-radius awareness for IAM changes
•
Safe promotion of access changes into production
Automate Identity and Access Workflows
•
Build scalable automation for identity lifecycle management, access requests, entitlement changes, access reviews, and day-to-day IAM operations.
•
Provisioning and deprovisioning automation
•
Access request and approval workflows
•
Group-based access assignment and role mapping
•
Okta app integration and assignment automation
•
IAM Identity Center permission set automation
•
Self-service identity workflows for internal teams
•
Identity reporting and access visibility pipelines
•
Operational tooling that reduces repetitive IAM work
•
Terraform and Infrastructure as Code workflows
•
Python, Bash, PowerShell, and APIs
•
CI/CD systems and Git-based change management
•
Okta Workflows and similar orchestration tooling
•
ServiceNow, ticketing, and operational workflow integrations
•
AI tools such as Claude Code, Codex, and similar engineering assistants
•
MCP-enabled integrations, agentic workflows, and internal automation platforms
•
Reduction of manual IAM work
•
Secure-by-default access onboarding
Strengthen Identity Security and Risk Reduction
•
Lead initiatives to reduce identity-related risk across human and non-human identities.
Design and implement controls for:
•
Excessive permissions and privilege escalation reduction
•
Service account and workload identity hardening
•
Long-lived credential reduction
•
Cross-account trust policy review and hardening
•
Permission boundary enforcement
•
Role lifecycle management
•
Just-in-time and time-bound privileged access
•
Break-glass access workflows
•
Identity anomaly detection and misuse investigation
Use native and third-party tooling to identify and remediate risk, including:
•
GCP-native IAM and audit services
•
Okta System Log and access reporting
•
CIEM, CSPM, and related cloud security platforms
Improve Zero Trust and Privileged Access Security
•
Partner with IAM, platform, and security teams to strengthen Zero Trust and privileged access controls across Scopely’s environment.
•
Twingate connectors, resources, and access policy design
•
Identity-aware remote access controls
•
Zero Trust segmentation for internal applications and privileged systems
•
Privileged access workflows
•
PAM platform integrations such as Britive
•
MFA and passwordless adoption
•
Federated access into AWS, GCP, SaaS platforms, and internal tools
•
Secure vendor and contractor access patterns
•
Non-human identity security
•
Privileged session control
•
Access policy consistency across environments
Support Identity Investigations, Monitoring, and Audit Readiness
•
Partner with Security Operations, Compliance, and Infrastructure teams to improve identity monitoring, investigation, and audit readiness.
•
IAM troubleshooting runbooks
•
Identity-related detection and triage workflows
•
Permission reporting and evidence collection
•
IAM logging and monitoring design
•
Operational metrics for identity security maturity
Support investigations involving:
•
Suspicious access activity
•
Identity and permission abuse
•
Misconfigured app integrations
•
Broken federation and provisioning flows
•
Cross-account access issues
Collaborate with compliance and audit stakeholders to ensure:
•
SOC 2 and ISO 27001 alignment
•
Access review evidence readiness
•
Documentation of IAM controls and workflows
•
Clear traceability for privileged access and entitlement changes
Build AI-Assisted Identity Security Workflows
•
Design and improve AI-assisted and automation-first workflows that help Scopely scale identity security safely.
•
AI-assisted access review analysis
•
AI-assisted troubleshooting and documentation support
•
Intelligent triage for identity-related findings
•
Security chatops integrations
•
Identity workflow automation using agents and orchestration systems
•
Internal copilots for IAM operations and knowledge support
•
AI-assisted recommendations for access hygiene and remediation
•
MCP-enabled identity tooling and integrations
•
Claude Code, Codex, and similar AI-assisted engineering tools
•
MCP-based workflows and agentic automation patterns
•
Internal automation platforms and workflow engines
•
APIs, event-driven automation, and identity telemetry pipelines
Ensure safe adoption of AI by applying:
•
Human-in-the-loop approval controls
•
Least-privilege access to tools and data
•
Logging and auditability for AI-assisted workflows
•
Prompt and data handling safeguards
•
Clear separation between recommendations and privileged actions
Act as a Technical Leader
•
Partner with engineering, platform, IT, and studio teams to align IAM strategy with Scopely’s operational and business goals.
Provide expert guidance on:
•
Federated identity design
•
Least-privilege engineering
•
Terraform design patterns for identity and access management
•
Access governance in fast-growing environments
•
Secure access design for engineering teams
•
Safe use of AI in identity and access workflows
•
Adopt secure identity patterns
•
Reduce reliance on manual access processes
•
Improve cloud and SaaS access consistency
•
Build scalable and maintainable identity controls
•
Automation-first IAM operations
•
Practical access governance
•
Engineering-driven IAM design
•
AI-assisted identity operations