SRE II - Identity and Access Management

At F5, we strive to bring a better digital world to life. Our teams empower organizations across the globe to create, secure, and run applications that enhance how we experience our evolving digital world. We are passionate about cybersecurity, from protecting consumers from fraud to enabling companies to focus on innovation. Everything we do centers around people. That means we obsess over how to make the lives of our customers, and their customers, better. And it means we prioritize a diverse F5 community where each individual can thrive. Role Overview: Join a growing team securing both leading-edge protection solutions and enterprise infrastructure. As a Site Reliability Engineer II, a part of the Operational Support Systems (OSS) organization under the Security & Distributed Cloud organization , you will ensure all FedRAMP and commercial infrastructure is functioning properly and securely to support business operations and F5 products and services. This position is focused on Identity and Access Management (IAM) for F5’s FedRAMP environments and requires the ability to analyze, troubleshoot, resolve issues, configure and maintain systems, automate workflows, and create and update documentation regularly to ensure clarity and operational continuity. You will collaborate closely with your counterparts as part of a follow-the-sun support model to ensure smooth global operations. What You’ll Do: Be kind. IAM Operations: Manage IAM workflows such as access provisioning, deprovisioning, permissions updates, and identity-related escalations to support secure and efficient operations. Ticket Management: Resolve IAM-related tickets via Jira, GitLab, and ServiceNow, meeting SLA requirements and ensuring high-quality resolutions. Automation and Workflow Optimization: Write and maintain scripts using Python, Bash, Selenium, or PowerShell to automate provisioning, compliance reporting, and repetitive IAM tasks such as access management updates. Build and Enhance Automation Pipelines: Collaborate with IAM and engineering teams to design, configure, and troubleshoot automation pipelines for managing deployments and ensuring efficient identity-related workflows. Documentation: Write and maintain clear and thorough documentation for IAM workflows, automation scripts, pipeline configurations, and system troubleshooting processes to ensure operational clarity for the team. Identity Provider Migrations & Consolidation: Assist in Identity Provider (IdP) migrations for systems such as Okta and Entra ID and consolidate duplicative IAM systems as part of mergers and acquisitions (M&A). Ensure scalability, availability, and security during integration efforts. Monitoring and Alerting: Deploy monitoring tools, such as Prometheus, Grafana, and Splunk, to track IAM system health and resolve potential risks before they impact operations. On-Call Support: Participate in an on-call rotation, responding to urgent escalations and restoring services quickly for IAM-related outages. What You’ll Bring: Bachelor’s degree in computer science, information technology, or 4+ years of relevant technical experience. Experience onboarding and supporting users and applications in FedRAMP-authorized environments; Moderate/IL4/IL5 experience a strong plus. Experience managing in-boundary IAM workflows, including provisioning, deprovisioning, and auditing role-based access control systems. Familiarity with Identity Provider systems such as Okta and Entra ID. Working knowledge of NIST SP 800-53, FedRAMP authorization frameworks, FISMA reporting requirements, and DISA STIGs. Proficiency in scripting and workflow automation using Python, Bash, or PowerShell. Experience designing and optimizing automation pipelines for workflow deployment and integration. Familiarity with Infrastructure-as-Code (IaC) tools such as Terraform or Ansible. Deep hands-on experience in AWS and GCP supporting Identity and Access Management (IAM), including creating and managing service accounts, designing custom roles, and implementing tailored security policies Strong technical writing skills with the ability to create and maintain detailed documentation that supports operational workflows and troubleshooting processes. Experience working with ticket management systems, such as Jira, GitLab, and ServiceNow. Proven ability to troubleshoot issues, address technical escalations, and collaborate across geographically distributed teams. Preferred: Certifications such as Certified Identity and Access Manager (CIAM), ITIL, or public cloud certifications (AWS Certified DevOps Engineer, Google Professional DevOps Engineer). Familiarity with container orchestration platforms, such as Kubernetes or Docker. Experience supporting Identity Provider (IdP) migrations and consolidating systems during M&A. #LI-JB1 The Job Description is intended to be a general representation of the responsibilities and requirements of the job. However, the description may not be all-inclusive, and responsibilities and requirements are subject to change. The annual base pay for this position is: $114,400.00 - $171,600.00 F5 maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, geographic locations, and market conditions, as well as to reflect F5’s differing products, industries, and lines of business. The pay range referenced is as of the time of the job posting and is subject to change. You may also be offered incentive compensation, bonus, restricted stock units, and benefits. More details about F5’s benefits can be found at the following link: https://www.f5.com/company/careers/benefits . F5 reserves the right to change or terminate any benefit plan without notice. Please note that F5 only contacts candidates through F5 email address (ending with @f5.com) or auto email notification from Workday (ending with f5.com or @myworkday.com ) . Equal Employment Opportunity It is the policy of F5 to provide equal employment opportunities to all employees and employment applicants without regard to unlawful considerations of race, religion, color, national origin, sex, sexual orientation, gender identity or expression, age, sensory, physical, or mental disability, marital status, veteran or military status, genetic information, or any other classification protected by applicable local, state, or federal laws. This policy applies to all aspects of employment, including, but not limited to, hiring, job assignment, compensation, promotion, benefits, training, discipline, and termination. F5 offers a variety of reasonable accommodations for candidates . Requesting an accommodation is completely voluntary. F5 will assess the need for accommodations in the application process separately from those that may be needed to perform the job. Request by contacting accommodations@f5.com .