Principal IAM Engineer

What’s so great about working on Calendly’s Operations team? 

We are the foundation that aims to set up our people for success to do the best work of their life at Calendly. 

Why do we need you? Well, we are looking for a Principal IAM Engineer who will bring adaptability, ownership, and a strong desire to drive meaningful results across Calendly. You will report to the Director, IT Operations and will be responsible for owning Calendly’s Identity and Access Management (IAM) strategy, tools, and lifecycle processes. This includes designing, implementing, and maintaining secure access controls, automation workflows, and governance frameworks. In this role, you will work in direct partnership with Calendly’s executives and senior leaders to ensure our IAM posture not only protects the business but also enables productivity at scale.

On a typical day, you will: 

• Builds automation workflows to streamline provisioning, deprovisioning (onboarding/offboarding), and access governance.
• Defines and implements IAM security posture improvements, including business process strategy, entitlement, and access management.
• Manages the IAM environment including Access Groups, Service Accounts, Sandbox access, and API configuration.
• Proactively identifies and resolves IAM lifecycle management issues.
• Conducts regular assessments and audits of relevant systems to ensure compliance with industry standards and regulations.
• Maintains application dashboards and relevant documentation.
• Provides high-level estimates for tasks and projects, assisting with project planning and prioritization.
• Troubleshoots and resolves technical issues related to systems in a timely manner.
• Collaborates cross-functionally with technical and non-technical stakeholders, clearly communicating complex IAM concepts (e.g., RBAC) to diverse audiences.
• Facilitates governance discussions with business leaders and partners, ensuring alignment between security needs, compliance requirements, and business objectives.

What do we need from you?

• 8+ years of direct IT experience, with 3+ years as an Okta administrator and/or architect
• Expert knowledge of Okta products and services, including Okta Identity Cloud, Okta Workflows, and Okta API Access Management.
• Proficiency in integrating Okta solutions with various applications and systems such as HR systems, finance systems, and cloud platforms.
• Experience with Google Workspace administration and automation tooling, including GAM for user and group lifecycle management.
• Hands-on experience with modern identity management tools and public cloud platforms (e.g., Multi-Factor Authentication, Security Tokens, OAuth, Amazon Web Services, Atlassian).
• Experience working in a primarily macOS, remote-first environment.
• Strong cross-functional communication skills, with the ability to explain complex IAM concepts to non-technical stakeholders and guide governance discussions.
• Authorized to work lawfully in the United States of America, as Calendly does not engage in immigration sponsorship at this time.

• Okta Certified Administrator

Ready to make a serious impact? Millions of people already rely on Calendly’s products, and we’re still in the midst of our growth curve — it’s a fantastic time to join us. Everything you’ll work on here will accelerate your career to the next level. If you want to learn, grow, and do the best work of your life alongside the best people you’ve ever worked with, then we hope you’ll consider allowing Calendly to be a part of your professional journey. 

If you are an individual with a disability and would like to request a reasonable accommodation as part of the application or recruiting process, please contact us at [email protected] . Calendly is registered as an employer in many, but not all, states. If you are located in Alaska, Hawaii, Montana, North Dakota, South Dakota, Nebraska, Iowa, West Virginia, and Rhode Island, you will not be eligible for employment. Note that all individual roles will specify location eligibility.

All candidates can find our Candidate Privacy Statement here

Candidates residing in California may visit our Notice at Collection for California Candidates here: Notice at Collection

The ranges listed below are the expected annual base salary for this role, subject to change.

Calendly takes a number of factors into consideration when determining an employee’s starting salary, including relevant experience, relevant skills sets, interview performance, location/metropolitan area, and internal pay equity.

Base salary is just one component of Calendly’s total rewards package. All full-time (30 hours/week) employees are also eligible for our Top Performer Bonus program (or Sales incentive), equity awards, and competitive benefits.

Calendly uses the zip code of an employee’s remote work location, or the onsite building location if hybrid, to determine which metropolitan pay range we use. Current geographic zones are as follows:

• Tier 1: San Francisco, CA, San Jose, CA, New York City, NY
• Tier 2: Chicago, IL, Austin, TX, Denver, CO, Boston, MA, Washington D.C., Philadelphia, PA, Portland, OR, Seattle, WA, Miami, FL, and all other cities in CA.
• Tier 3: All other locations not in Tier 1 or Tier 2