Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 3 hours agoWe saw it 106 min after it went up

Identity & Access Management (IAM) Engineer

Backblaze32 open roles

Pay
$155,000 – $195,000 a year
Where
Remote - US
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowIdentity & Access Management (IAM) EngineerBackblaze · Remote - US

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Backblaze's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.5% of postings close within 7 days. Measured by our own scanner across the market. Backblaze postings stay open a median of 42 days.

Share of postings closed within
  1. 2.3%1 day
  2. 4.6%3 days
  3. 13.5%7 days
  4. 21.8%14 days
  5. 36.6%30 days
  6. 58.9%60 days
This job: posted 3 hours ago

Backblaze median: 42 days open

The posting

About Backblaze

Backblaze is the object storage leader in the open cloud movement, fueling customersuccess with cloud storage built purposefully to unlock budgets, unburden administrators, and unleash innovators. Together with our partners, we’re helping customers break free from the restrictive, overpriced legacy solutions that hold them back, and blaze forward with the full power of the open cloud in their hands. Founded in 2007, we scaled the business with less than $3 million in outside funding until 2021, when we did a traditional IPO on the Nasdaq stock exchange. Today, Backblaze generates over $100m in revenue and is the leading specialized storage cloud - managing over three billion gigabytes of data storage for 500K+ customers in 175+ countries, including businesses, developers, IT professionals, and individuals.

Role Overview

The Identity & Access Management (IAM) Engineer designs, implements, and operates identity and access capabilities for human users, non-human identities, workloads, devices, services, and AI agents. The role focuses on the subject side of access control—identity, authentication, roles, groups, entitlements, and privileges—with an emphasis on least privilege, separation of duties, strong authentication, automated lifecycle management, and short-lived credentials.

The engineer partners with others across the organization to ensure applications, infrastructure, and services appropriately mediate access, separate security domains, minimize unnecessary sharing, and limit common mechanisms that could increase privilege or blast radius.

Key Responsibilities

  • Design and operate authentication, authorization, federation, SSO, MFA, RBAC/ABAC, PAM, conditional access, policy-based authorization, just-in-time access, continuous verification, and privileged-access capabilities.
  • Engineer roles, groups, entitlements, and privilege assignments around least privilege and separation of duties.
  • Automate identity provisioning, access reviews, privilege changes, revocation, and deprovisioning.
  • Implement phishing-resistant MFA, cryptographically bound authentication, and strong identity assurance across enrollment, authentication, federation, and recovery.
  • Govern service accounts, machine and device identities, workloads, automated processes, APIs, and AI-agent identities.
  • Implement short-lived workload and agent identities using federation, certificates, and modern workload-identity approaches while reducing reliance on persistent secrets.
  • Partner with architects, engineers, and resource owners to ensure access is efficiently mediated and designs minimize excessive privilege, unnecessary sharing, and cross-domain exposure.
  • Monitor identity posture and partner with Security Operations to investigate identity threats and rapidly revoke compromised access.

Qualifications

  • Hands-on experience engineering enterprise IAM systems and integrations.
  • Strong knowledge of authentication, authorization, federation, identity lifecycle management, role/group design, separation of duties, and least privilege.
  • Knowledge of phishing-resistant MFA, cryptographic authentication, identity proofing, federation, and modern identity assurance practices.
  • Experience managing human and non-human identities, including service, machine, workload, or device identities.
  • Experience automating identity processes using APIs, scripting, or Infrastructure-as-Code.
  • Understanding of PKI, secrets management, short-lived credentials, workload identity federation, and technologies such as OIDC, OAuth, and SPIFFE/SPIRE.
  • Ability to reason about identity and authorization across distributed systems and collaborate with architects and engineers on secure access design.

Backblaze Perks:

  • Healthcare for family, including dental and vision
  • Competitive compensation and 401K
  • RSU grants for full-time employees
  • ESPP program
  • Flexible vacation policy
  • Maternity & paternity leave
  • MacBook Pro to use for work plus a generous stipend to personalize your workstation
  • Childcare bonus (human children only)
  • Fertility treatment and support
  • Learning & development program
  • Commuter benefits
  • Culture that supports a healthy work-life balance

To provide greater transparency to candidates, we share base pay ranges for all US-based job postings regardless of state. We set standard base pay ranges for all roles based on function, level, and country location, benchmarked against similar-stage growth companies. Final offer amounts are determined by multiple factors, including candidate location, skills, depth of work experience, and relevant licenses/credentials, and may vary from the amounts listed below.

The base pay range for this position is $155,000 - $195,000

At Backblaze, we value being fair and good to our customers, partners, and employees. That’s why diversity, equity, and inclusion are at the core of our values. We are committed to fostering a workforce where all employees feel a sense of belonging regardless of race, ethnicity, nationality, gender, sexual orientation, age, religion, socio-economic status, ability, veteran status, and education. We believe that our dedication to cultivating a diverse workspace not only allows us to better serve our customers in over 175 countries, but further reinforces our commitment to doing the right thing. We are proud to be an Equal Opportunity Employer.

To understand more about the data we collect and process as part of your application, please view our Backblaze Employee Privacy Notice.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Backblaze's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Backblaze's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Backblaze's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.