Site Reliability Engineer, Enterprise IAM

About the Team

OpenAI’s IT organization supports the mission of deploying artificial general intelligence (AGI) for the benefit of all. Our team is committed to providing seamless technological support and solutions to ensure that all OpenAI employees are well-equipped and connected. This enables them to contribute effectively towards our AI research, corporate operations and product initiatives. 

About the Role

As an SRE, Enterprise IAM at OpenAI, you will be responsible for designing, building, and maintaining scalable Identity and Access Management (IAM) solutions that empower our teams while ensuring security and compliance. You will leverage automation, Infrastructure-as-Code (IaaC), and CI/CD methodologies to optimize identity lifecycle management, primarily within AzureAD, while integrating across multi-cloud environments such as AWS and GCP.

This role requires a proactive, engineering-first mindset to build automation-driven identity workflows, improve security posture through zero-trust frameworks, and collaborate with security and DevOps teams to implement scalable IAM solutions. You will play a critical role in shaping and evolving IAM processes by adopting cutting-edge technologies, automating access management, and ensuring seamless and secure user experiences across OpenAI.

By implementing best practices in identity automation, observability, and policy enforcement, you will directly contribute to the efficiency and productivity for teams across OpenAI.

In this role, you will:

• Design, build, and maintain scalable IAM automation workflows using Python, PowerShell, and Terraform to support user lifecycle management.

• Develop Infrastructure-as-Code (IaC) solutions for IAM environments, leveraging Terraform to manage Azure/Entra lifecycle workflows at scale.

• Implement CI/CD pipelines to automate IAM deployments and ensure seamless integration across cloud platforms (Azure, AWS, GCP).

• Define and implement monitoring and observability strategies to proactively manage IAM system health and compliance.

• Own the configuration and optimization of AzureAD identity access, ensuring seamless user provisioning through automated birthright access solutions.

• Collaborate with security and DevOps teams to integrate IAM solutions within a Zero Trust framework, driving security automation and compliance.

• Lead initiatives to improve IAM practices by adopting emerging technologies, automating processes, and optimizing for scalability and efficiency.

You may be a fit for this role if you have:

• Advanced proficiency in scripting and automation, particularly in Python and PowerShell, with the ability to develop scalable automation solutions that enhance operational efficiency, drive self-service capabilities, and enforce security policies, including automating birthright access workflows.

• Experience in an IT or IT-adjacent field.

• Extensive hands-on experience with Azure Active Directory (AzureAD) and identity management systems, with a proven track record of designing and implementing automated provisioning and de-provisioning solutions at scale using Azure/Entra lifecycle workflows and Infrastructure-as-Code (IaC) principles.

• Strong experience in Infrastructure-as-Code (IaC) and cloud automation tools, such as Terraform, to provision, configure, and manage identity services programmatically across complex cloud environments.

• Proven ability to architect, deploy, and manage access control mechanisms, leveraging best-in-class security frameworks such as Zero Trust, RBAC, and ABAC to enhance security postures while maintaining user productivity.

• Deep understanding of identity governance and administration (IGA) platforms, with expertise in designing robust access controls and automating identity lifecycle processes to ensure compliance, security, and seamless user experiences.

• Demonstrated expertise in optimizing IAM processes through engineering best practices, including CI/CD integrations, policy-as-code implementations, and automation of access reviews and approvals.

• Experience in designing and enforcing scalable access policies and automated governance frameworks, ensuring compliance with evolving security standards and adapting to the needs of a high-growth, security-conscious organization.

 This is a hybrid role and will require 3 days a week in our San Francisco office.

About OpenAI

OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity. We push the boundaries of the capabilities of