Senior Principal IAM Security Engineer - Remote

Job Requisition ID #

25WD90604

Position Overview

Autodesk's Cyber Defense team is looking for a Sr. Principal IAM Security Engineer to lead the strategy, design, and execution of secure, scalable identity solutions across the enterprise. This is a pivotal role for a hands-on leader with deep expertise in identity architecture, a security-first mindset, and the ability to influence across organizational boundaries.

You'll lead key initiatives such as Zero Trust enforcement, Non-Human Identity (NHI) governance, IAM Threat Management and automation of identity workflows, while working across multiple business units to align platforms, reduce risk, and build seamless access experiences.

This is a strategic and hands-on role for someone who wants to lead Autodesk's enterprise identity posture, drive large-scale impact across teams, and ensure our systems are secure, automated, and aligned with Zero Trust principles.

Responsibilities

• Act as a strategic IAM lead and subject matter expert, driving secure identity architecture across SailPoint, Entra ID (Azure AD), AWS IAM, and PAM platforms-while remaining technology-agnostic and outcome-focused
• Drive the implementation of Zero Trust identity controls: phishing-resistant MFA, device-aware conditional access, and least-privilege enforcement
• Define and govern lifecycle management, classification, and policy for Non-Human Identities (NHIs) such as service accounts and automation agents
• Manage and enhance Threat Detection platforms and CIEM components
• Design and deploy Role-Based Access Control (RBAC) frameworks across Autodesk, enabling Day 1 access automation and alignment to job functions
• Build and maintain integrations between IAM platforms and enterprise systems using APIs, SCIM, Webhooks, and other protocols
• Experience securing and automating identity for DevOps environments and CI/CD pipelines
• Familiarity with modern authentication protocols (OAuth2, OIDC, SAML, SPIFFE)
• Strong documentation skills and a track record of policy/standards development
• Passion for collaboration, mentoring, and building secure-by-default environments
• Develop automation for provisioning, deprovisioning, access reviews, and certification workflows using scripting languages like Python, PowerShell, or equivalent
• Partner across business units to influence platform teams, drive adoption of identity standards, and streamline access governance practices
• Collaborate with Compliance and Audit to implement controls for SOX, SOC2, FedRAMP, and internal policy requirements
• Serve as a mentor and technical coach to junior engineers, fostering team growth and security excellence
• Participate in architecture reviews, incident response, and risk assessments related to IAM

• 10+ years in IAM and Security Engineering, with 3+ years in a principal-level capacity
• Ability to map threats against human and non-human identities and implement a strategic plan to reduce and eliminate risks
• Deep, technology-agnostic understanding of identity security, access governance, and lifecycle management
• Hands-on experience with SailPoint, Azure AD/Entra ID, AWS IAM, CyberArk, or equivalent platforms
• Strong experience with coding/scripting (e.g., Python, PowerShell) and building integrations using REST APIs, SCIM, and web services
• Proven ability to lead identity programs across hybrid cloud environments and influence cross-functional teams
• Familiarity with compliance frameworks (SOX, SOC2, ISO 27001) and governance-focused access reviews
• Excellent communication skills; able to influence engineers, business partners, and senior leadership