fountain
IAM Engineer
Subway
Shelton, USA
Full-time
Mid Level
Onsite
USD 102700-128400 yearly
Discovered 1 weeks ago
Free
Job Fit Check
Base Career helps you apply smarter for this job.
?%
Ready to ScanFull Job Posting
Why Join Subway?
At Subway, we are not standing still.
We are building.
This is a business focused on what matters most: growing franchisee profitability, strengthening our brand and creating long-term value.
The people who thrive here are the ones who want to make a real impact.
You will not just do the work.
You will shape it.
We move fast.
We think like owners.
We make decisions that matter.
We hold ourselves to a high standard because what we do directly impacts thousands of franchisees around the world.
If you bring energy, accountability and a bias for action, you will fit right in.
We take the work seriously, but we also know the best results come from teams that support each other, celebrate wins and show up ready to build something better every day.
This is your chance to be part of what’s next.
Position Overview
The IAM Engineer builds and operates the day-to-day identity and access management capabilities that keep Subway's workforce productive and secure. Subway runs a modern, broker-centered identity architecture: an HRIS-driven identity pipeline feeds Okta as the identity broker and primary SSO provider, which federates and provisions access across a hybrid estate spanning Active Directory, Microsoft Entra ID, Microsoft 365, ServiceNow, AWS IAM Identity Center, and a broad SaaS portfolio. This is a hands-on operational and engineering role — owning the daily health of the identity platform while building the automation that steadily retires manual work. The role carries a clear development path toward senior-level identity engineering, including deeper federation and protocol work, access governance, identity threat detection, and security architecture.
Responsibilities
- Operate the identity platform day to day: new SSO application setup, access request fulfillment and escalations, MFA management, group and access cleanup, and account lifecycle corrections; troubleshoot provisioning and authentication issues end to end — SCIM sync failures, attribute mismatches, SSO errors — performing root-cause analysis and documenting resolutions as runbooks.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Subway
Manager
Windsor, USA
Discovered TodayFull Time, Part Time
Sandwich Artist
Hammond, USA
Discovered TodayPart Time, Full Time
Sandwich Artist
North Madison, USA
Discovered TodayFull Time, Part Time
Shift Manager
Portage la Prairie, CAN
Discovered TodayPart Time, Full Time
Senior Leasing Representative
Toronto, CAN
Discovered TodayFull-time
Manager, Business Analytics
Toronto, CAN
Discovered TodayFull-time
Coordinator II
Toronto, CAN
Discovered TodayFull-time
Manager, Marketing Data Analytics
Toronto, CAN
Discovered TodayFull-time