Software Engineer II

What's the role?

The IAM Engineer supports the Identity & Access Management team in operating and improving our identity platforms—Active Directory, SailPoint, and Okta. The role focuses on helping manage user access, troubleshooting identity issues, and contributing to automation and configuration of IAM services.

They work with GitLab and Infrastructure-as-Code to help build and maintain IAM components in a modern, DevOps-oriented way. The role is hands-on and technical, with a strong focus on scripting, automation, and learning how to integrate applications and systems into the IAM landscape.

Identity & Access Operations

• Support user lifecycle processes across Active Directory, SailPoint, and Okta.

• Assist in managing access requests, group memberships, and provisioning issues.

• Troubleshoot authentication and authorization problems.

Automation & Infrastructure as Code

• Contribute to IAM infrastructure using GitLab and Infrastructure-as-Code (IaC) principles (e.g., Terraform, YAML automation pipelines).

• Help build and maintain CI/CD pipelines for IAM services.

• Participate in writing scripts (PowerShell, Python, or similar) to automate routine IAM tasks.

System Maintenance & Configuration

• Help maintain configuration for SailPoint connectors, Okta integrations, and AD objects.

• Support onboarding new applications to IAM systems under guidance of senior engineers.

DevOps & Continuous Improvement

• Adopt a DevOps mindset: automate repeatable tasks, document processes, and improve reliability.

• Participate in regular code reviews, retrospectives, and team knowledge-sharing sessions.

• Contribute to monitoring and troubleshooting IAM service issues.

Who are you?

We are looking for a motivated IAM Engineer to join our Identity & Access Management team. You will support the design, implementation, and maintenance of our IAM ecosystem, working hands-on with Active Directory, SailPoint IdentityIQ / ISC and Okta.

This role is ideal for someone who is early in their IAM or DevOps journey and is eager to learn modern automation practices, contribute to secure identity operations, and grow within a highly technical team.

The expected base salary range for this position is $73,500 to $83,000 per year. Actual compensation will be based on factors such as skills and experience. 

This position is also eligible for a target annual performance bonus, which is subject to company and individual performance.

Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, HERE will consider for employment qualified applicants with arrest and conviction records.

HERE is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, age, gender identity, sexual orientation, marital status, parental status, religion, sex, national origin, disability, veteran status, and other legally protected characteristics.

Under Section 503 of the Rehabilitation Act of 1973 and VEVRAA, we have developed an affirmative action program (AAP) for individuals with disabilities and protected veterans. Portions of the AAP are available for review by applicants and employees through our People Team.

#LI-AG3

Who are we?

HERE Technologies is a location data and technology platform company. We empower our customers to achieve better outcomes – from helping a city manage its infrastructure or a business optimize its assets to guiding drivers to their destination safely.

At HERE we take it upon ourselves to be the change we wish to see. We create solutions that fuel innovation, provide opportunity and foster inclusion to improve people’s lives. If you are inspired by an open world and driven to create positive change, join us. Learn more about us on our YouTube Channel.