Security Developer, Identity and Access Management

Make access management seamless, secure, and self-service! What if every access request could be fast, auditable, and automated without anyone chasing approvals? As a Security Developer on Coveo’s Identity and Access Management (IAM) team, you’ll build the tooling and automation that make secure access simple across the company. You’ll design workflows, integrations, and self-service platforms that transform fragmented processes into a unified, developer-friendly experience. Your work will empower teams to manage access efficiently while strengthening security and compliance at scale. As our Security Developer on the IAM team, you will: Build and maintain access request and approval workflows that empower system owners to manage access to their systems. Develop self-service tools, including application programming interfaces (APIs), command-line interfaces, and lightweight user interfaces, enabling IT Helpdesk and system owners to provision and deprovision access independently. Design automated user lifecycle pipelines for onboarding, offboarding, and role changes, integrating with human resources systems and identity providers such as Okta. Build audit logging and access review systems that provide unified visibility across corporate and research and development environments for compliance reporting. Integrate with existing security tools and platforms, building on shared infrastructure rather than creating parallel systems. Collaborate with Security Engineering, IT, and platform teams to reduce friction and make access management intuitive, secure, and scalable. Here is what will qualify you for the role: 3+ years of software engineering experience, including hands-on experience building internal tooling, automation, or platform services. Proficiency in Python or another backend language, along with experience building APIs and integrations. Practical experience with workflow orchestration, approval systems, or business process automation. Familiarity with identity and access management concepts, including single sign-on (SSO), System for Cross-domain Identity Management (SCIM), role-based access control (RBAC), OpenID Connect (OIDC), and Security Assertion Markup Language (SAML), as well as cloud platforms and infrastructure as code. What will make you stand out: Experience with identity providers such as Okta or Microsoft Entra ID, including API-driven configuration and automation. Hands-on experience building developer self-service platforms or internal portals that abstract operational complexity. Familiarity with just-in-time access, time-bound permissions, zero standing privilege, privileged access management, or relevant security and identity certifications. Do you think you can bring this role to life? Send us your application, we want to hear from you! Join the Coveolife! We encourage all qualified candidates to apply regardless of, for example, age, gender, disability, gaps in CV, national or ethnic background. This job description was written by humans, assisted by AI. We may leverage technology in our hiring process to help us see the person behind the resume. Coveo is committed to providing accessible employment practices. If you require accommodation due to a disability at any point during the recruitment process, please contact [email protected] to discuss your needs.

You will build and maintain automated access request workflows and self-service tools to streamline identity management. Additionally, you will develop user lifecycle pipelines and audit logging systems to ensure security and compliance across the organization.

Candidates must have at least 3 years of software engineering experience with a focus on internal tooling and automation. Proficiency in Python or a similar backend language and familiarity with IAM protocols like SAML, OIDC, and RBAC are required.

• PythonPreferred

Identified from the job description. Confirm important requirements above.

• Python
• Identity and Access Management
• API Development
• Workflow Orchestration
• Automation
• Okta
• SSO
• SCIM
• RBAC
• OIDC
• SAML
• Infrastructure as Code
• Cloud Platforms
• Security Engineering
• System Provisioning
• Compliance Reporting
• Security Tools
• Pipelines
• Coveo
• Workflow Management
• Privileged Access Management
• Infrastructure as Code (IaC)
• Application Programming Interface (API)
• Artificial Intelligence
• Auditing
• Management
• Business Process Automation
• Command-Line Interface
• Help Desk Support
• Scalability
• Identity And Access Management
• Python (Programming Language)
• OpenID
• Role-Based Access Control (RBAC)
• Security Assertion Markup Language (SAML)
• Self Service Technologies
• Single Sign-On (SSO)
• Software Engineering
• Tooling

• Technology
• Software
• Security & Safety
• Engineering
• Identity and Access Management Developer
• Python Developer
• Software Developers

Minimum experience

2+ years

Posting language

English

Working hours

40 hours per week