Job description
Note: The job is a remote job and is open to candidates in USA. Relativity is seeking an Advanced IAM Engineer to serve as a hands-on operational backbone for its enterprise identity and access management function. The role designs, deploys, and optimizes identity technologies across workforce, customer, machine, and AI-agent domains while improving identity threat detection and response.
Responsibilities
Implement and operate identity controls spanning workforce, machine, and workload identity as part of a layered defense-in-depth modelOperate continuous adaptive trust mechanisms, including continuous access evaluation (CAE), risk-based step-up authentication, and session revocation, that re-verify identity against real-time posture and behavioral signals rather than at the access gate aloneConfigure ZTNA, least-privilege access, phishing-resistant MFA/FIDO2, and JIT access across access pathsImplement SSO, federation, and authentication standards (SAML, OAuth 2.0, OIDC, SCIM, Kerberos, LDAP) across SaaS and multi-cloud environmentsApply hardening standards to identity infrastructure using CIS Benchmarks/DISA STIGs with automated compliance validationBuild and maintain identity lifecycle automation (joiner/mover/leaver) integrating HR systems, directories, and downstream applicationsOperate identity governance and administration (IGA) workflows: access reviews, certification campaigns, and segregation-of-duties checksAdminister privileged access management (PAM) including credential vaulting, JIT elevation, and session monitoringMaintain governance of non-human identities (service accounts, workloads, secrets) using drift detection and policy-as-codeFeed identity telemetry into the detection stack (SIEM/SOAR, UEBA) to support detection of credential abuse, privilege escalation, and lateral movementExecute identity-focused IR playbook steps for account takeover, credential compromise, and session hijackingImplement identity checks in CI/CD pipelines (secret scanning, IaC identity analysis), acting on AI-generated fix recommendations in PR workflowsTrack identity hygiene metrics and support audits, certifications, and e-discovery requirements alongside GRC
Skills
Must be able to obtain and maintain the required Public Trust clearance for this roleBachelor's in Computer Science, Information Security, or equivalent experience5+ years of hands-on experience in enterprise IAM or security engineering, with a focus on identity, authentication, and access domains, or a Master's degree in Cybersecurity or a relevant fieldHands-on experience with common identity tools such as IdP/SSO (Okta, Entra ID/Azure AD, Ping), IGA (SailPoint, Saviynt), PAM (CyberArk, BeyondTrust), and directory services, plus intermediate knowledge of authentication and federation protocols (SAML, OIDC, OAuth 2.0, SCIM, LDAP, Kerberos)Basic knowledge of industry-standard security benchmarks and frameworks (MITRE, NIST 800-63, Zero Trust)Proficiency in at least one scripting/automation language (Python, Bash, or PowerShell) applied to modern containerized services, CLI-based commands, and/or identity-specific use cases (API-driven provisioning, policy-as-code)Ability to communicate technical findings clearly to both engineering peers and non-technical stakeholdersFamiliarity with AI-enabled identity operations (UEBA, ML-based access-risk scoring, or AI-assisted access-review and threat-hunting workflows)Basic knowledge of common cloud environments (AWS, Azure, or GCP) and their native identity services (IAM, RBAC, workload identity)Working knowledge of the software development lifecycle, software engineering practices, or infrastructure-as-code environments: contributing identity and access controls (secrets management, workload identity, policy-as-code) to CI/CD pipelinesExperience with non-human, workload, and AI-agent identity, secrets management, and machine-to-machine authenticationExperience supporting compliance and audit requirements (SOC 2, ISO 27001, FedRAMP, HIPAA) from an identity and access control perspectiveRelevant certifications such as SC-300 (Microsoft Identity and Access Administrator), AZ-500 (Azure Security Engineer), Okta Certified Professional/Administrator, SailPoint IdentityIQ, SEC+, CISSP, CISA, or equivalent
Benefits
An annual performance bonusLong-term incentivesRemote work
Company Overview
Relativity provides legal data intelligence and AI technology for litigation and investigations. It was founded in 2001, and is headquartered in Chicago, Illinois, USA, with a workforce of 1001-5000 employees. Its website is http://www.relativity.com.
Company H1B Sponsorship
Relativity has a track record of offering H1B sponsorships, with 21 in 2026, 23 in 2025, 12 in 2024, 21 in 2023, 25 in 2022, 20 in 2021, 30 in 2020. Please note that this does not guarantee sponsorship for this specific role.
Prepare your application
Use the description above to assess your fit for Relativity. This checklist is guidance from Resumize, rather than additional requirements from the employer. Imported listings can be shortened or change after collection, so confirm the complete description and current availability before sending an application.
Match requirements to evidence
Identify the responsibilities and skills the employer explicitly names. For each important requirement, choose one example from your work, education, training, or projects. Explain what you did, how you did it, and what changed as a result. Include a measurable outcome when you can support it. If you lack a requirement, describe related experience accurately instead of adding an unfamiliar skill to your resume.
Put the most relevant examples near the top of your resume. Keep job titles, dates, qualifications, and contact details consistent across your application materials. Use the employer’s terminology when it describes your experience accurately; a copied list of keywords does not explain your contribution. A short, specific bullet is easier to review than a paragraph that mixes several unrelated duties.
Check the working arrangement
Confirm the location, schedule, employment type, and any eligibility requirements on the employer’s site. A remote label does not establish worldwide eligibility or flexible hours. If compensation, benefits, equipment, travel, or contract duration are missing from this listing, write down your questions for the recruiter. Do not assume details from another opening at the same company apply to this role.
Review before submitting
Follow the employer’s requested file format and application instructions. Open your exported resume and check that its text is selectable, its sections read in order, and its links work. Proofread names, dates, and contact information. Share confidential work samples only when you have permission, and use an anonymized example when necessary.
Submit through a trusted employer or recruiting destination. If the original listing has disappeared, search the employer’s careers page for the title rather than assuming the vacancy remains open. Save the application date, job reference, and the version of your resume you sent. Those details help you prepare for a later conversation and avoid submitting conflicting information through several job boards.
Review your resume for writing and readability feedback, or browse other openings if this opportunity is unavailable.