Intern, Identity and Access Management Engineer

Who We Are

Shape a brighter financial future with us.

Together with our members, we’re changing the way people think about and interact with personal finance.

We’re a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way.

Join us to invest in yourself, your career, and the financial world.

We are seeking an IAM Engineering Intern to join SoFi’s Identity and Access Management (IAM) Engineering team and gain hands‑on experience helping secure and scale SoFi’s workforce identity infrastructure. This internship offers the opportunity to work within a security-focused engineering team, helping protect SoFi’s members and data while learning from experienced IAM engineers.

The IAM Engineering team is responsible for scaling the identity security of our workforce through automating authentication (SSO) and authorization processes. As an IAM Intern, you will work closely with IAM Engineers as well as cross‑functional partners in IT and Business Application administration to gather requirements, automate manual processes, and improve operational effectiveness.

In this role, you’ll be exposed to modern security principles where identity is the new perimeter that secures cloud applications. You will learn how a modern fintech organization implements Zero Trust principles at scale to protect SoFi's members and data. This is a hands‑on, learning‑focused role designed to build foundational skills in identity engineering, automation, and secure authentication.

• Assist with connecting business applications to Okta using standards‑based protocols such as SAML and OIDC for secure, seamless authentication.
• Support the implementation of User Lifecycle Management by connecting applications to Okta via the SCIM protocol.
• Help build and maintain direct API connections to various SaaS applications to automate user management using low‑code platforms like Okta Workflows.
• Partner with cross-functional teams in IT and Business Application administration to gather requirements for new integrations.
• Contribute to troubleshooting and optimizing existing identity workflows to improve operational efficiency.
• Learn to apply Role‑Based Access Control (RBAC) and Least Privilege principles across a complex, enterprise‑scale environment.
• Document technical configurations and workflow processes to support IAM governance and compliance.

• Enrolled in an accredited US‑based university (working towards a Bachelor’s or Master’s degree) with an expected graduation date of December 2026 or Spring 2027
• Must be returning to school for at least one quarter or semester after the internship
• Have no more than 12 months of professional full‑time work experience (excluding internships and research assistant roles)
• Must be willing to relocate to San Francisco Bay Area and be available to work in the San Francisco HQ office at a hybrid capacity (2‑3x a week)
• Foundational understanding of cybersecurity concepts related to Authentication, Authorization, and Accounting.
• Experience or coursework involving REST APIs (ability to understand and interact with API endpoints).
• Familiarity with Multifactor authentication types, such as Passkeys and Time‑based One Time Passcodes (TOTP)
• Interest in low code and/or pro‑code automation tools
• Ability to analyze and interpret logs and alerts to identify success and failures in automated workflows
• Good written and verbal communication skills, with the ability to document findings clearly.
• Ability to work collaboratively as part of a team while taking ownership of assigned tasks.

• Hands‑on experience through labs, coursework, personal projects, or internships related to Identity Providers (IdP) such as Okta, Azure AD/Entra , or Google Workspace.
• Familiarity with low‑code/no‑code automation or SOAR tools (e.g., Okta Workflows, Tines, Zapier).
• Basic…