Pleasanton, CA

Salary
$170,360–$230,000from the description
Posted
Jul 6, 2026
Location
Pleasanton, CA
Last confirmed open
Jul 21, 2026

What this job asks for AI summary

A senior individual-contributor role responsible for architecting and leading an enterprise-wide identity and access management program across a fragmented, multi-domain environment. The work centers on consolidating disparate directory systems and identity platforms, establishing governance standards covering lifecycle management, privileged access, and entitlements, and ensuring alignment with regulatory frameworks such as PCI DSS and SOC2. The role suits a deep IAM specialist comfortable driving organizational change and mentoring staff without managing direct reports.

Senior level · 12+ years · San Francisco-Oakland-Hayward, CA · Bachelor's required · Full-time

Advertised as Principal, but the requirements read as Senior.

Must have (11)
Active DirectorySAMLOAuthOIDCSCIMLDAPKerberosServiceNowPCI DSSSOC2SOX
Nice to have (1)
Okta

We read this from the posting text with AI. Skim the description below before ruling yourself out.

How this req sits in the market our data

Roughly 3 people in the San Francisco-Oakland-Hayward, CA area plausibly meet what this posting asks for (information security analysts). range 1–6

Applicant volume Moderate — A normal amount of company. The rare requirements below are what will separate a shortlisted application from the rest.

What gives you an edge
SCIM4%

Rare in this occupation — lead with these, and say what you built with them.

What won't set you apart
Active Directory50%

Most people in this occupation already list these. Still required — just not what gets you shortlisted.

What the occupation pays Median $165,879 (middle half $117,529–$206,125). This posting is about at that midpoint.

Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.

Why we read it this way (6)

The role is titled 'Principal IAM Engineer' but the actual scope — 12+ years of experience, technical program ownership without direct reports, and cross-functional influence — aligns with a Senior-level individual contributor rather than a true Principal (org-wide technical authority). Seniority is assessed as Senior accordingly.

SOC classification is Medium confidence: the role is primarily an IAM/identity security architect, which sits closest to Information Security Analysts (15-1212). A case could be made for 15-1299 (Computer Occupations, All Other) given the specialized IAM program-ownership framing.

Okta is listed in the qualifications section but explicitly qualified as 'highly valued' rather than required, so it is treated as preferred.

The degree requirement states 'BA + 12+ years experience … or equivalent relevant experience.' Because equivalent experience is offered as an alternative, the degree requirement is set to None per schema rules — however, the posting does lead with a BA, so this is a borderline call.

The role is hybrid (Tuesdays and Wednesdays in-office at Pleasanton, CA headquarters), not fully remote.

Compensation range is stated for California residents only: $170,360–$230,000/year.

Read the full posting

The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.

Apply

Apply on employer site ↗