Security Developer, Identity and Access Management

What if every access request could be fast, auditable, and automated without anyone chasing approvals? As a Security Developer on Coveo’s Identity and Access Management (IAM) team, you’ll build the tooling and automation that make secure access simple across the company.

You’ll design workflows, integrations, and self-service platforms that transform fragmented processes into a unified, developer-friendly experience. Your work will empower teams to manage access efficiently while strengthening security and compliance at scale.

• Build and maintain access request and approval workflows that empower system owners to manage access to their systems.
• Develop self-service tools, including application programming interfaces (APIs), command-line interfaces, and lightweight user interfaces, enabling IT Helpdesk and system owners to provision and deprovision access independently.
• Design automated user lifecycle pipelines for onboarding, offboarding, and role changes, integrating with human resources systems and identity providers such as Okta.
• Build audit logging and access review systems that provide unified visibility across corporate and research and development environments for compliance reporting.
• Integrate with existing security tools and platforms, building on shared infrastructure rather than creating parallel systems.
• Collaborate with Security Engineering, IT, and platform teams to reduce friction and make access management intuitive, secure, and scalable.

• 3+ years of software engineering experience, including hands-on experience building internal tooling, automation, or platform services.
• Proficiency in Python or another backend language, along with experience building APIs and integrations.
• Practical experience with workflow orchestration, approval systems, or business process automation.
• Familiarity with identity and access management concepts, including single sign-on (SSO), System for Cross-domain Identity Management (SCIM), role-based access control (RBAC), OpenID Connect (OIDC), and Security Assertion Markup Language (SAML), as well as cloud platforms and infrastructure as code.

• Experience with identity providers such as Okta or Microsoft Entra ID, including API-driven configuration and automation.
• Hands-on experience building developer self-service platforms or internal portals that abstract operational complexity.
• Familiarity with just-in-time access, time-bound permissions, zero standing privilege, privileged access management, or relevant security and identity certifications.

Do you think you can bring this role to life? Send us your application, we want to hear from you!

Join the Coveolife!

We encourage all qualified candidates to apply regardless of, for example, age, gender, disability, gaps in CV, national or ethnic background.

This job description was written by humans, assisted by AI. We may leverage technology in our hiring process to help us see the person behind the resume.

Coveo is committed to providing accessible employment practices. If you require accommodation due to a disability at any point during the recruitment process, please contact [email protected] to discuss your needs.