Security Developer, Identity and Access Management

CanadaOnsiteFull TimePosted 2 months ago

Is this role right for you?

Upload your resume and get a skill-by-skill breakdown — see exactly where you match, where you're close, and what to highlight. Not a mystery percentage.

Get a tailored resume highlighting what this role needs.

Required skills

Security Developer
Identity and Access Management
IAM
access request
approval workflows
self-service tools
APIs
command-line interfaces
user interfaces
provisioning

Nice to have

Okta
Microsoft Entra ID
API-driven configuration
developer self-service platforms
internal portals
just-in-time access

Role summary

Coveo is seeking a Security Developer specializing in Identity and Access Management (IAM) to build and maintain secure, seamless, and self-service access management solutions. The role involves designing workflows, APIs, and automation to streamline access requests, provisioning, and user lifecycle management. Key responsibilities include developing self-service tools, integrating with HR systems and identity providers like Okta, and building audit logging and access review systems for compliance. The ideal candidate will have 3+ years of software engineering experience, proficiency in Python or another backend language, and practical experience with workflow orchestration and IAM concepts. Experience with Okta, Microsoft Entra ID, and developer self-service platforms is preferred.

Make access management seamless, secure, and self-service!

What if every access request could be fast, auditable, and automated without anyone chasing approvals? As a Security Developer on Coveo’s Identity and Access Management (IAM) team, you’ll build the tooling and automation that make secure access simple across the company.

You’ll design workflows, integrations, and self-service platforms that transform fragmented processes into a unified, developer-friendly experience. Your work will empower teams to manage access efficiently while strengthening security and compliance at scale.

As our Security Developer on the IAM team, you will:

Build and maintain access request and approval workflows that empower system owners to manage access to their systems.

Develop self-service tools, including application programming interfaces (APIs), command-line interfaces, and lightweight user interfaces, enabling IT Helpdesk and system owners to provision and deprovision access independently.

Design automated user lifecycle pipelines for onboarding, offboarding, and role changes, integrating with human resources systems and identity providers such as Okta.

Build audit logging and access review systems that provide unified visibility across corporate and research and development environments for compliance reporting.

Integrate with existing security tools and platforms, building on shared infrastructure rather than creating parallel systems.

Collaborate with Security Engineering, IT, and platform teams to reduce friction and make access management intuitive, secure, and scalable.

Here is what will qualify you for the role:

3+ years of software engineering experience, including hands-on experience building internal tooling, automation, or platform services.

Proficiency in Python or another backend language, along with experience building APIs and integrations.

Practical experience with workflow orchestration, approval systems, or business process automation.

Familiarity with identity and access management concepts, including single sign-on (SSO), System for Cross-domain Identity Management (SCIM), role-based access control (RBAC), OpenID Connect (OIDC), and Security Assertion Markup Language (SAML), as well as cloud platforms and infrastructure as code.

What will make you stand out:

Experience with identity providers such as Okta or Microsoft Entra ID, including API-driven configuration and automation.

Hands-on experience building developer self-service platforms or internal portals that abstract operational complexity.

Familiarity with just-in-time access, time-bound permissions, zero standing privilege, privileged access management, or relevant security and identity certifications.

Do you think you can bring this role to life? Send us your application, we want to hear from you!

Join the Coveolife!

We encourage all qualified candidates to apply regardless of, for example, age, gender, disability, gaps in CV, national or ethnic background.

This job description was written by humans, assisted by AI. We may leverage technology in our hiring process to help us see the person behind the resume.

Coveo is committed to providing accessible employment practices. If you require accommodation due to a disability at any point during the recruitment process, please contact HR@Coveo.com to discuss your needs.

Ready to apply?

You'll be redirected to Coveo's application page.