Senior IAM Engineer

Reserv is an insurtech creating and incubating cutting-edge AI and automation technology to bring efficiency and simplicity to claims. Founded by insurtech veterans with deep experience in SaaS and digital claims, Reserv is venture-backed by Bain Capital and Altai Ventures and began operations in May 2022. We are focused on automating highly manual tasks to tackle long-standing problems in claims and set a new standard for TPAs, insurance technology providers, and adjusters alike. We have ambitious (but attainable!) goals and need people who can work in an evolving environment. If building a leading TPA and the prospect of tackling the long-standing challenges of the claims role sounds exciting, we can't wait to meet you.

Candidates must reside in an eligible U.S. state throughout employment. We are unable to hire candidates residing in California, Alaska, Hawaii, U.S. territories, or outside the United States.

• 6+ years in a Cybersecurity or relevant role; with minimum 4+ focused squarely on identity and access management.
• IGA platform experience with Okta (required).
• Rippling or a comparable modern HRIS used as an identity source of truth.
• Security+, Okta Certified Administrator / Consultant, or relevant.
• Identity threat detection, Identity Security Posture Management, or insider threat program experience.
• Scaling IAM through high growth or surge onboarding.
• Deep hands-on Okta: SSO, SCIM, Lifecycle Management, workflows, and policy design.
• Enhanced understanding of SAML, OIDC, OAuth 2.0, MFA and conditional access.
• Documented privileged access experience: vaulting, just-in-time elevation, credential rotation.
• Cloud IAM in AWS: roles, policies, federation, permission boundaries.
• RBAC and ABAC design, entitlement modeling, and SoD enforcement.
• Scripting and automation in Python or PowerShell against REST APIs.
• Bachelor’s degree in Cybersecurity, IT, or related field.
• Manage confidential work such as investigations and separations with discretion.
• Strong written and verbal communication. 
• Experience working in a cloud-first or startup environment.

• →Administer the identity lifecycle end to end. Automated joiner, mover and leaver for employees, contractors and independent adjusters, driven by HRIS. 
• →Manage access certifications. Real reviewers, real remediation, real evidence. Assuring least privilege.
• →Assure standing admin access. Just-in-time elevation across Okta, AWS, and our claims and payment platforms.
• →Anomaly identification. Build and tune detection for access anomalies, dormant account reactivation, and privilege escalation.
• →Incidents and Insider Threat Investigations. Reconstruct the access timeline, scope the exposure, preserve the evidence, and contain it fast.
• →Automation. Python, PowerShell, Okta Workflows and APIs, facilitating audit preparation.
• →Auditing. SOC 2, carrier client assessments, HIPAA, GDPR, and state insurance data security requirements, plus logical access controls over the systems that matter to the books.
• →Standardization. Mentor and coach business reviewers so access hygiene scales past you.