Staff IAM Engineer
CLEAR - Corporate · New York, NY
$200,000–$240,000from the description
Jul 5, 2026
New York, NY
Jul 21, 2026
What this job asks for AI summary
A senior individual-contributor role focused on designing, building, and scaling identity and access management infrastructure, primarily around Okta and SailPoint. The work involves architecting least-privilege access controls across AWS environments and FedRAMP boundaries, driving IAM lifecycle automation through scripting and API integrations, and managing configurations via Terraform. Suited to an engineer with 8+ years of hands-on IAM and security engineering experience.
Staff level · 8+ years · New York-Newark-Jersey City, NY-NJ-PA · Full-time
“or” means any one of them counts — you don't need all of them.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Roughly 130 people in the New York-Newark-Jersey City, NY-NJ-PA area plausibly meet what this posting asks for (information security analysts). range 70–170
Applicant volume Moderate — A normal amount of company. The rare requirements below are what will separate a shortlisted application from the rest.
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $143,559 (middle half $110,181–$179,574). This posting is about at that midpoint.
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (6)
Terraform is explicitly called 'a strong plus' in the requirements section, placing it in a preferred/nice-to-have category despite appearing alongside otherwise hard-gated skills.
The role is tagged #LI-Onsite, indicating in-office work; CLEAR's headquarters is in New York, NY, so the NYC CBSA is used.
AWS IAM expertise is stated as a hard requirement covering IAM policies, roles, SCPs, and AWS IAM Identity Center — captured as a single 'AWS IAM' skill.
Python is listed as the primary scripting language with Bash cited as an alternative ('Python, Bash, etc.'); both are named so Bash is captured as an alternative.
The 'Staff' title is explicitly used in the job title and the scope (technical lead across major IAM initiatives, subject matter expert for core identity platforms) genuinely supports a Staff-level classification — this is not merely a Senior role with an inflated title.
FedRAMP boundary experience is mentioned in the responsibilities but not explicitly called out as a named skill requirement; it is context for the AWS/cloud security work.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.