Builds secure, automated identity and access management tooling, including access request workflows, self-service APIs and interfaces, user lifecycle pipelines, audit logging, and access review systems. Integrates HR systems, identity providers such as Okta, and security platforms while collaborating with Security Engineering, IT, and platform teams to improve scalable access provisioning, deprovisioning, compliance, and developer experience.
Make access management seamless, secure, and self-service!
What if every access request could be fast, auditable, and automated without anyone chasing approvals? As a Security Developer on Coveo’s Identity and Access Management (IAM) team, you’ll build the tooling and automation that make secure access simple across the company.
You’ll design workflows, integrations, and self-service platforms that transform fragmented processes into a unified, developer-friendly experience. Your work will empower teams to manage access efficiently while strengthening security and compliance at scale.
As our Security Developer on the IAM team, you will:- Build and maintain access request and approval workflows that empower system owners to manage access to their systems.
- Develop self-service tools, including application programming interfaces (APIs), command-line interfaces, and lightweight user interfaces, enabling IT Helpdesk and system owners to provision and deprovision access independently.
- Design automated user lifecycle pipelines for onboarding, offboarding, and role changes, integrating with human resources systems and identity providers such as Okta.
- Build audit logging and access review systems that provide unified visibility across corporate and research and development environments for compliance reporting.
- Integrate with existing security tools and platforms, building on shared infrastructure rather than creating parallel systems.
- Collaborate with Security Engineering, IT, and platform teams to reduce friction and make access management intuitive, secure, and scalable.
- 3+ years of software engineering experience, including hands-on experience building internal tooling, automation, or platform services.
- Proficiency in Python or another backend language, along with experience building APIs and integrations.
- Practical experience with workflow orchestration, approval systems, or business process automation.
- Familiarity with identity and access management concepts, including single sign-on (SSO), System for Cross-domain Identity Management (SCIM), role-based access control (RBAC), OpenID Connect (OIDC), and Security Assertion Markup Language (SAML), as well as cloud platforms and infrastructure as code.
- Experience with identity providers such as Okta or Microsoft Entra ID, including API-driven configuration and automation.
- Hands-on experience building developer self-service platforms or internal portals that abstract operational complexity.
- Familiarity with just-in-time access, time-bound permissions, zero standing privilege, privileged access management, or relevant security and identity certifications.
Do you think you can bring this role to life? Send us your application, we want to hear from you!
Join the Coveolife!
We encourage all qualified candidates to apply regardless of, for example, age, gender, disability, gaps in CV, national or ethnic background.
This job description was written by humans, assisted by AI. We may leverage technology in our hiring process to help us see the person behind the resume.
Coveo is committed to providing accessible employment practices. If you require accommodation due to a disability at any point during the recruitment process, please contact [email protected] to discuss your needs.
Similar Jobs
Software
Build IAM workflows, self-service APIs, command-line tools, and lightweight interfaces for access provisioning and deprovisioning. Automate employee lifecycle processes through HR and identity-provider integrations, create audit logging and access-review systems, and integrate security platforms across corporate and R&D environments. Collaborate with Security Engineering, IT, and platform teams to deliver secure, scalable, developer-friendly access management.
Top Skills:
APIsCloud PlatformsInfrastructure As CodeMicrosoft Entra IdOidcOktaPythonRbacSAMLScimSso
Cloud • Security • Software • Cybersecurity • Automation
Conduct advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Identify and exploit novel, systemic, and chained vulnerabilities; develop proof-of-concept exploits, testing methodologies, and research automation; assess AI attack vectors and open-source dependencies; drive remediation and security improvements; advise engineering teams, contribute to roadmaps, mentor researchers, and share findings with the security community.
Top Skills:
Duo Agent PlatformGitlabGitlab DuoGoPythonRubyRustTypescript
Cloud • Security • Software • Cybersecurity • Automation
Conducts advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Responsibilities include discovering and exploiting systemic vulnerabilities, penetration testing, developing proof-of-concept exploits, researching AI and agentic security threats, building automated research tooling, coordinating remediation, mentoring security professionals, and communicating findings to engineering and security communities.
Top Skills:
Ai FrameworksDevsecopsDuo Agent PlatformGitlabGitlab Duo ChatGoPythonRubyRustTypescript
What you need to know about the Toronto Tech Scene
Although home to some of the biggest names in tech, including Google, Microsoft and Amazon, Toronto has established itself as one of the largest startup ecosystems in the world. And with over 2,000 startups — more than 30 percent of the country's total startups — Toronto continues to attract new businesses. Be it helping entrepreneurs manage their finances, simplifying business operations by automating payroll or assisting pharmaceutical companies in launching new drugs, the city's tech scene is just getting started.
