New

Senior Identity and Access Management Engineer

Chobani
$105,500.00 - ,
parental leave, paid time off, tuition reimbursement, 401(k)
United States, New York, New York
200 Lafayette Street (Show on map)
Feb 17, 2026
Summary The Senior IAM Engineer will play a key role in designing, implementing, and operating enterprise identity and access management capabilities across Microsoft Entra ID and the organization's credential management systems to include PKI. This role requires deep technical expertise, hands-on engineering experience, and the ability to translate business and security requirements into secure, automated identity controls. Responsibilities 1. Microsoft Entra Identity Services Design, implement, and maintain secure SSO integrations for SaaS and on-prem applications using SAML, OIDC, and OAuth2. Lead the automation of user provisioning and deprovisioning workflows via Entra ID and SCIM-based integrations. Develop and manage access reviews, entitlement management, and least-privilege policies using Microsoft Entra and Azure AD Identity Governance. Implement and maintain conditional access policies, MFA configurations, and group-based access controls. Collaborate with application owners and security teams to ensure consistent identity lifecycle management across hybrid cloud environments. 2. PKI and Credential Management Design, implement, and operationalize enterprise PKI infrastructure, including certificate authorities, registration authorities, and certificate templates. Enhance and automate certificate enrollment, renewal, and revocation workflows across servers, applications, and end-user devices. Integrate certificate-based authentication (CBA) with identity platforms and endpoint management systems. Develop policies and processes for credential issuance, rotation, and lifecycle management. Support audit and compliance requirements related to certificate and credential management. Requirements Qualifications Bachelor's degree in Computer Science, Cybersecurity, or related field (or equivalent experience). 5-8 years of experience in IAM engineering or related security infrastructure roles. Deep knowledge of Microsoft Entra ID (Azure AD), identity protocols (SAML, OIDC, OAuth2), and lifecycle management best practices. Experience implementing Entra ID Identity Governance features (access reviews, entitlement management, PIM). Strong expertise with PKI technologies (Microsoft ADCS, cloud-based CAs, HSM integration, CRLs, and certificate automation). Familiarity with modern credential management tools (e.g., Venafi, Keyfactor, HashiCorp Vault, or Azure Key Vault). Hands-on scripting experience (PowerShell, Python, or similar) for automation and API integrations. Working knowledge of security and compliance standards such as NIST, ISO 27001, and Zero Trust Architecture. Preferred Skills Experience with identity federation and hybrid cloud IAM architectures. Prior experience integrating EntraID (or other IDP) with SAP GRC Access Management and/or SAP IAS. Knowledge of device identity, machine certificates, and code-signing processes. Strong troubleshooting and documentation skills. Strong Microsoft based skills as it relates to IAM. Relevant certifications such as Microsoft Certified: Identity and Access Administrator (SC-300), CISSP, or similar. Success in this Role Streamlined identity lifecycles with measurable improvements in provisioning efficiency and access compliance. Automated certificate management processes reducing human intervention and outages. Strengthened identity security posture aligned with Zero Trust principles. About Us Chobani is a food maker with a mission of making high-quality and nutritious food accessible to more people, while elevating our communities and making the world a healthier place. In short: making good food for all. In support of this mission, Chobani is a purpose-driven, people-first, food-and-wellness-focused company, and has been since its founding in 2005 byHamdi Ulukaya, an immigrant to the U.S. The Company manufactures yogurt, oat milk, and creamers - Chobani yogurt is America's No.1 yogurt brand, made with natural ingredients without artificial preservatives. Following the 2023 acquisition of La Colombe, a leading coffee roaster with a shared commitment to quality, craftmanship and impact, the Company began selling cold-pressed espresso and lattes on tap at cafes nationwide, as well as Ready to Drink (RTD) coffee beverages at retail. In 2025, Chobani acquired Daily Harvest, a modern brand offering consumers nutritious, delicious and convenient ready-to-make meals. Chobani uses food as a force for good in the world - putting humanity first in everything it does. The company's philanthropic efforts prioritize giving back to its communities and beyond. Chobani manufactures its products inNew York,Idaho,MichiganandAustralia, and its products are available throughoutNorth Americaand distributed inAustraliaand other select markets. For more information, please visitwww.chobani.com or follow us on Facebook, Twitter, Instagram and LinkedIn. Chobani is an equal opportunity employer. Chobani will not discriminate against any applicant for employment on any basis including, but not limited to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, military and/or veteran status, marital status, predisposing genetic characteristics and genetic information, or any other classification protected by federal, state, and local laws. The salary range for this full-time position is $105,500.00 - , + bonus + equity + benefits. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process. Chobani provides a comprehensive benefits package, including medical, dental, vision coverage, disability insurance, health savings account, flexible spending accounts, and tuition reimbursement. To help save for the future, all employees are eligible for a 401k match of 100% on up to 5% of eligible pay. To support growing families, we provide fertility and childcare assistance, and 12 weeks of parental leave at full pay after six months of continuous employment. In addition, we provide wellness resources which include an employee assistance program, fitness discounts, a wellness reimbursement, on-site gym access (certain locations) and a monthly wellness newsletter to connect you with resources and timely information. We offer various types of paid time of including: 120 hours of paid time off, 11 holidays, and paid volunteer time off.