Security Developer, Identity and Access Management

Role Summary

Make access management seamless, secure, and self-service!

What if every access request could be fast, auditable, and automated without anyone chasing approvals? As a Security Developer on Coveo’s Identity and Access Management (IAM) team, you’ll build the tooling and automation that make secure access simple across the company.

You’ll design workflows, integrations, and self-service platforms that transform fragmented processes into a unified, developer-friendly experience. Your work will empower teams to manage access efficiently while strengthening security and compliance at scale.

As our Security Developer on the IAM team, you will:

• Build and maintain access request and approval workflows that empower system owners to manage access to their systems.
• Develop self-service tools, including application programming interfaces (APIs), command-line interfaces, and lightweight user interfaces, enabling IT Helpdesk and system owners to provision and deprovision access independently.
• Design automated user lifecycle pipelines for onboarding, offboarding, and role changes, integrating with human resources systems and identity providers such as Okta.
• Build audit logging and access review systems that provide unified visibility across corporate and research and development environments for compliance reporting.
• Integrate with existing security tools and platforms, building on shared infrastructure rather than creating parallel systems.
• Collaborate with Security Engineering, IT, and platform teams to reduce friction and make access management intuitive, secure, and scalable.

Here is what will qualify you for the role

• 3+ years of software engineering experience, including hands-on experience building internal tooling, automation, or platform services.
• Proficiency in Python or another backend language, along with experience building APIs and integrations.
• Practical experience with workflow orchestration, approval systems, or business process automation.
• Familiarity with identity and access management concepts, including single sign-on (SSO), System for Cross-domain Identity Management (SCIM), role-based access control (RBAC), OpenID Connect (OIDC), and Security Assertion Markup Language (SAML), as well as cloud platforms and infrastructure as code.

Requirements

What will make you stand out

• Experience with identity providers such as Okta or Microsoft Entra ID, including API-driven configuration and automation.
• Hands-on experience building developer self-service platforms or internal portals that abstract operational complexity.
• Familiarity with just-in-time access, time-bound permissions, zero standing privilege, privileged access management, or relevant security and identity certifications.
• Do you think you can bring this role to life? Send us your application, we want to hear from you!
• Join the Coveolife!
• We encourage all qualified candidates to apply regardless of, for example, age, gender, disability, gaps in CV, national or ethnic background.
• This job description was written by humans, assisted by AI. We may leverage technology in our hiring process to help us see the person behind the resume.
• Coveo is committed to providing accessible employment practices. If you require accommodation due to a disability at any point during the recruitment process, please contact HR@Coveo.com to discuss your needs.