Owns the design, modernization, and automation of Chewy’s identity and access management platforms. Responsibilities include SailPoint lifecycle and provisioning solutions, Okta integrations, birthright access, joiner-mover-leaver processes, service and AI agent identity governance, technical debt reduction, root-cause analysis, audit evidence, and mentoring junior IAM engineers. The role leads IAM projects end to end and participates in on-call support for critical identity services.
Job Description:
Our Opportunity
Chewy's IAM team keeps the right people, services, and AI agents connected to the right access, from someone's first day to their last. As an IAM Engineer III, a senior individual-contributor role, you'll set technical direction for our identity platforms, primarily SailPoint Identity Security Cloud alongside Okta, and own the big projects that make whole categories of manual work disappear.
This isn't a ticket-queue role. Your success is measured by the work you eliminate: request types automated away, manual steps removed, and cycle times cut, all while keeping strong controls and clean audit evidence. You'll mentor IAM Engineer I and II staff, lead design reviews, and help shape how Chewy governs non-human identities, including AI agents.
What You'll Own in Your First Year
What You'll Do
Bonus (Nice to Have)
The base salary range for this role is $118,500 - $189,500.00.
We offer different types of insurance and benefits, such as medical/Rx, vision, dental, life, disability, hospital indemnity, critical illness, and accident. We offer parental leave, family services benefits, backup dependent care, flexible spending accounts, telemedicine, pet adoption reimbursement, employee assistance program, and many discounts including 10% off pet insurance and 20% off at Chewy.com.
Exempt salary team members have unlimited PTO, subject to manager approval. Team members will receive six paid holidays per year. Team members may be eligible for paid sick and family leave in compliance with applicable state and local regulations.
Chewy is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, ancestry, national origin, gender, citizenship, marital status, religion, age, disability, gender identity, results of genetic testing, veteran status, as well as any other legally-protected characteristic. If you have a disability under the Americans with Disabilities Act or similar law, and you need an accommodation during the application process or to perform these job requirements, or if you need a religious accommodation, please contact [email protected].
To access Chewy's California CPRA Job Applicant Privacy Policy, please click here.
Our Opportunity
Chewy's IAM team keeps the right people, services, and AI agents connected to the right access, from someone's first day to their last. As an IAM Engineer III, a senior individual-contributor role, you'll set technical direction for our identity platforms, primarily SailPoint Identity Security Cloud alongside Okta, and own the big projects that make whole categories of manual work disappear.
This isn't a ticket-queue role. Your success is measured by the work you eliminate: request types automated away, manual steps removed, and cycle times cut, all while keeping strong controls and clean audit evidence. You'll mentor IAM Engineer I and II staff, lead design reviews, and help shape how Chewy governs non-human identities, including AI agents.
What You'll Own in Your First Year
- Modernize the joiner experience. Redesign how new hires move from offer to day one: accounts ready ahead of time, the right access exactly on the start date, and nothing early.
- Automate birthright access at scale. Turn manual license and access requests into rule-based roles that grant and remove access on their own as people join, move, and leave.
- Strengthen the leaver and contractor lifecycle. Make sure access ends exactly when employment or a contract ends, with proof.
- Onboard and run SailPoint Machine Identity Security (MIS) and Data Access Security (DAS), extending governance to service accounts, machine identities, and sensitive data access.
- Consolidate access onto modern, requestable patterns, working with our identity provider experts to move app access off legacy directory groups.
- Build safe automation, with AI where it helps, that removes manual work, keeps human approval where it matters, and leaves clear evidence for audit.
What You'll Do
- Own IAM projects end to end: define the problem and the starting numbers, design the fix, lead the build, roll it out, and prove the result.
- Hunt down repeat work. Turn recurring tickets, incidents, and review findings into automation or self-service that removes them for good.
- Set direction and design solutions in SailPoint ISC: lifecycle, provisioning, correlation, connectors, transforms, workflows, and roles, with safe change practices (testing, staged rollout, rollback).
- Partner with our Okta experts on application access, lifecycle, and provisioning patterns.
- Own the technical debt list for your area and clear the highest-value items first.
- Lead root-cause analysis for serious failures and turn each into a lasting fix.
- Mentor IAM Engineer I and II staff through design reviews and pairing.
- Govern non-human identities (service accounts, workloads, AI agents) and take part in the on-call rotation for critical identity services.
Bonus (Nice to Have)
- SailPoint ISC certification (e.g. ISC Engineer) and/or Okta Certified Professional or Administrator
- Experience building AI-assisted automation or agent-based workflows, with human approval steps and audit-ready evidence
- Experience governing non-human identities: service accounts, workload identities, or AI agent credentials
- Experience with HR-driven lifecycle (Workday as the source of truth) and birthright role design at scale
- Experience integrating identity with service management (ServiceNow catalog and request flows)
- Background in audit and control evidence: certifications, separation of duties, least privilege
The base salary range for this role is $118,500 - $189,500.00.
- The specific salary offered to a candidate may be influenced by a variety of factors including but not limited to the candidate's relevant experience, education, and work location. In addition, this position is eligible for 401k and a new hire and annual equity grant. C08+ positions may also be eligible for annual bonus.
We offer different types of insurance and benefits, such as medical/Rx, vision, dental, life, disability, hospital indemnity, critical illness, and accident. We offer parental leave, family services benefits, backup dependent care, flexible spending accounts, telemedicine, pet adoption reimbursement, employee assistance program, and many discounts including 10% off pet insurance and 20% off at Chewy.com.
Exempt salary team members have unlimited PTO, subject to manager approval. Team members will receive six paid holidays per year. Team members may be eligible for paid sick and family leave in compliance with applicable state and local regulations.
Chewy is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, ancestry, national origin, gender, citizenship, marital status, religion, age, disability, gender identity, results of genetic testing, veteran status, as well as any other legally-protected characteristic. If you have a disability under the Americans with Disabilities Act or similar law, and you need an accommodation during the application process or to perform these job requirements, or if you need a religious accommodation, please contact [email protected].
To access Chewy's California CPRA Job Applicant Privacy Policy, please click here.
Similar Jobs at Chewy
eCommerce • Healthtech • Pet • Retail • Pharmaceutical
Leads Chewy’s Customer Care fraud and controls program across voice, chat, specialist, and self-service channels. Owns the fraud controls roadmap, defines risk-handling policies and account restrictions, improves agent tooling, coordinates Product, Engineering, Operations, and Policy partners, drives adoption, and measures loss prevention, efficiency, and customer outcomes. The role translates fraud patterns into scalable workflows, requirements, controls, and escalation processes while reducing fraud losses and unnecessary customer friction.
eCommerce • Healthtech • Pet • Retail • Pharmaceutical
Provides veterinary technician support at Chewy Vet Care. The provided description contains no further details about specific responsibilities, qualifications, schedule, compensation, travel, or work environment.
eCommerce • Healthtech • Pet • Retail • Pharmaceutical
Owns sales, assortment, pricing, promotions, vendor operations, P&L, and business strategy for strategic e-commerce brands. Develops growth plans, launches products, manages vendor relationships, maintains inventory health with supply chain partners, and uses market, customer, and data insights to improve performance.
What you need to know about the NYC Tech Scene
As the undisputed financial capital of the world, New York City is an epicenter of startup funding activity. The city has a thriving fintech scene and is a major player in verticals ranging from AI to biotech, cybersecurity and digital media. It also has universities like NYU, Columbia and Cornell Tech attracting students and researchers from across the globe, providing the ecosystem with a constant influx of world-class talent. And its East Coast location and three international airports make it a perfect spot for European companies establishing a foothold in the United States.
Key Facts About NYC Tech
- Number of Tech Workers: 549,200; 6% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Capgemini, Bloomberg, IBM, Spotify
- Key Industries: Artificial intelligence, Fintech
- Funding Landscape: $25.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Greycroft, Thrive Capital, Union Square Ventures, FirstMark Capital, Tiger Global Management, Tribeca Venture Partners, Insight Partners, Two Sigma Ventures
- Research Centers and Universities: Columbia University, New York University, Fordham University, CUNY, AI Now Institute, Flatiron Institute, C.N. Yang Institute for Theoretical Physics, NASA Space Radiation Laboratory
