Infra Application Engineer – Identity
Zoom · India
- Hybrid
- Full-time
- $150,000 / year
- India
This role may have been filled. Drop your résumé and we'll check if it's still open — or find you similar roles.
Job highlights
- Architect and engineer global identity fabric.
- Build high-performance, invisible identity infrastructure.
- Ensure 99.99% uptime for auth services.
- Automate lifecycle management for machine identities.
- Enable self-service for identity management.
About the role
About The Role
As an Identity Platform Engineer, you will lead the architecture and engineering of Zoom's global identity fabric. Your primary objective is to build a high-performance, invisible identity infrastructure that enables seamless access for a large number of users and non-human identities without manual intervention. You will ensure that identity is never a bottleneck for engineering velocity but a high-availability utility that supports our digital transformation goals.
About The Team
We are an Infrastructure team dedicated to building resilient, distributed identity services. We partner with Security, DevOps, Data, and Product teams to abstract away the complexity of access management. We provide "paved-road" automation patterns that make secure access effortless for developers and invisible to the end user.
Responsibilities
- Platform-Orchestration: Architect a unified, API-driven control plane that orchestrates identity lifecycles across a fragmented ecosystem of SaaS, Cloud (AWS, OCI), and data warehouses (Snowflake).
- Infrastructure-as-Code (IaC) Engineering: Designing and implementing "Governance Wrappers" for cloud provisioning, ensuring resources deployed with Terraform or CloudFormation integrate seamlessly into lifecycle management systems.
- Distributed-Systems Reliability: Ensure 99.99% uptime for authentication and authorization services, implementing redundancy, failover patterns, and "Chaos Engineering" to test system resilience in production.
- NHI-Lifecycle Management: Designing the lifecycle framework for "NHI" service accounts, API keys, and AI agents ensures automated management of machine identities comparable to human user processes.
- Self-Service Enablement: Build and maintain an internal "Identity AppStore" and chat-driven request flows to reduce helpdesk volume and improve time-to-productivity for new hires.
- Data-Driven Optimization: Utilize usage-aware intelligence to independently reclaim unused licenses and right-size over-provisioned infrastructure roles, driving down Total Cost of Ownership (TCO).
What We’re Looking For
- 5+ years of experience in Infrastructure, Platform, or Systems Engineering, with a proven track record of supporting high-throughput distributed systems in a large-scale product environment.
- Demonstrate expertise in SCIM 2.0, OIDC, SAML, and OAuth2 protocols. Showcase experience with modern identity platforms like Okta and Entra ID. Develop custom connectors using SDKs for specialized systems.
- Demonstrate expertise in managing infrastructure access in AWS, OCI, and Snowflake by automating cross-account trust and data-layer permissions effectively.
- Exhibit proficiency in Go, Python, or Java to create scalable automation services and apply Terraform to implement Identity-as-Code efficiently.
- Demonstrate expertise in the "Visibility-Before-Governance" principle, ensuring complete discovery of applications and identities prior to implementing automated workflows.
- Utilize agentic AI tools to address complex identity telemetry issues and automate the resolution of "permission drift" without requiring human involvement.
Ways of Working
Our structured hybrid approach is centered around our offices and remote work environments. The work style of each role, Hybrid, Remote, or In-Person is indicated in the job description/posting.
Benefits
As part of our award-winning workplace culture and commitment to delivering happiness, our benefits program offers a variety of perks, benefits, and options to help employees maintain their physical, mental, emotional, and financial health; support work-life balance; and contribute to their community in meaningful ways. Click Learn for more information.
About Us
Zoomies help people stay connected so they can get more done together. We set out to build the best collaboration platform for the enterprise, and today help people communicate better with products like Zoom Contact Center, Zoom Phone, Zoom Events, Zoom Apps, Zoom Rooms, and Zoom Webinars.
We’re problem-solvers, working at a fast pace to design solutions with our customers and users in mind. Find room to grow with opportunities to stretch your skills and advance your career in a collaborative, growth-focused environment.
Our Commitment
At Zoom, we believe great work happens when people feel supported and empowered. We’re committed to fair hiring practices that ensure every candidate is evaluated based on skills, experience, and potential. If you require an accommodation during the hiring process, let us know—we’re here to support you at every step.
If you need assistance navigating the interview process due to a medical disability, please submit an Accommodations Request Form and someone from our team will reach out soon. This form is solely for applicants who require an accommodation due to a qualifying medical disability. Non-accommodation-related requests, such as application follow-ups or technical issues, will not be addressed.
Key skills/competency
- Identity and Access Management
- Infrastructure Engineering
- Platform Engineering
- Distributed Systems
- AWS
- Terraform
- Go/Python/Java
- SCIM 2.0, OIDC, SAML, OAuth2
- Okta/Entra ID
- System Reliability
Skills & topics
- Identity Platform Engineer
- Identity and Access Management
- Infrastructure Engineering
- Platform Engineering
- Distributed Systems
- AWS
- OCI
- Snowflake
- Terraform
- Go
- Python
- Java
- SCIM
- OIDC
- SAML
- OAuth2
- Okta
- Entra ID
- System Reliability
- Chaos Engineering
- IaC
- Automation
How to get hired
- Tailor your resume: Highlight experience in identity platforms, distributed systems, and IaC.
- Showcase protocol expertise: Emphasize knowledge of SCIM, OIDC, SAML, and OAuth2.
- Demonstrate IaC skills: Detail experience with Terraform and cloud provisioning.
- Prepare for technical interviews: Be ready to discuss distributed systems reliability and automation.
- Understand Zoom's culture: Research their commitment to collaboration and growth.
Technical preparation
Behavioral questions
Frequently asked questions
- What specific identity protocols are essential for the Identity Platform Engineer role at Zoom?
- For the Identity Platform Engineer position at Zoom, expertise in SCIM 2.0, OIDC, SAML, and OAuth2 protocols is crucial. Demonstrating experience with modern identity platforms like Okta and Entra ID, and the ability to develop custom connectors using SDKs, will also be highly valued.
- How does Zoom approach Infrastructure as Code (IaC) for identity management?
- Zoom utilizes IaC for identity management by designing and implementing 'Governance Wrappers' for cloud provisioning. This ensures resources deployed via Terraform or CloudFormation integrate seamlessly into lifecycle management systems, promoting consistency and control over identity infrastructure.
- What level of experience is required for the Identity Platform Engineer position?
- The role of Identity Platform Engineer at Zoom requires a minimum of 5 years of experience in Infrastructure, Platform, or Systems Engineering. A proven track record of supporting high-throughput distributed systems in a large-scale product environment is also a key requirement.
- Can you explain Zoom's hybrid work model for this role?
- Zoom employs a structured hybrid approach for this role, balancing in-office and remote work. The specific work style (Hybrid, Remote, or In-Person) will be clearly indicated in the job posting.
- What programming languages are preferred for the Identity Platform Engineer role?
- Proficiency in Go, Python, or Java is preferred for the Identity Platform Engineer role at Zoom. These languages are used to create scalable automation services and implement Identity-as-Code efficiently with tools like Terraform.
- How does Zoom ensure the reliability of its identity services?
- Zoom ensures high availability for its authentication and authorization services, aiming for 99.99% uptime. This is achieved through implementing redundancy, failover patterns, and practicing 'Chaos Engineering' to proactively test and strengthen system resilience in production environments.
- What is the 'Visibility-Before-Governance' principle mentioned in the job description?
- The 'Visibility-Before-Governance' principle at Zoom emphasizes the importance of fully discovering all applications and identities within the ecosystem before implementing automated governance workflows. This ensures a comprehensive understanding and control over the identity landscape.
Similar roles
Open positions we recommend based on this role.