IAM Engineer III, Identity & Access Management

Job Description: Our Opportunity Chewy's IAM team keeps the right people, services, and AI agents connected to the right access, from someone's first day to their last. As an IAM Engineer III , a senior individual-contributor role, you'll set technical direction for our identity platforms, primarily SailPoint Identity Security Cloud alongside Okta, and own the big projects that make whole categories of manual work disappear. This isn't a ticket-queue role.

Your success is measured by the work you eliminate: request types automated away, manual steps removed, and cycle times cut, all while keeping strong controls and clean audit evidence. You'll mentor IAM Engineer I and II staff, lead design reviews, and help shape how Chewy governs non-human identities, including AI agents. What You'll Own in Your First Year Modernize the joiner experience.

Redesign how new hires move from offer to day one: accounts ready ahead of time, the right access exactly on the start date, and nothing early. Automate birthright access at scale. Turn manual license and access requests into rule-based roles that grant and remove access on their own as people join, move, and leave.

Strengthen the leaver and contractor lifecycle. Make sure access ends exactly when employment or a contract ends, with proof. Onboard and run SailPoint Machine Identity Security (MIS) and Data Access Security (DAS), extending governance to service accounts, machine identities, and sensitive data access.

Consolidate access onto