Senior Identity Engineer

Accountabilities:

• Design, implement, maintain, and continuously improve enterprise IAM solutions across Microsoft Entra ID, Microsoft 365, Okta, AWS, Azure, and SaaS environments.
• Lead the engineering and operational support of identity services covering authentication, authorization, federation, SSO, MFA, lifecycle management, and privileged access.
• Develop identity standards, reference architectures, engineering practices, and security controls aligned with Zero Trust and least-privilege principles.
• Design and implement secure identity integrations for cloud platforms, applications, APIs, third-party services, and enterprise SaaS environments.
• Build identity controls for AI platforms and services, including secure authentication, authorization, workload identities, API security, and access governance.
• Partner with security and engineering teams to establish appropriate identity controls for AI agents, copilots, machine identities, and service accounts.
• Engineer and support identity governance capabilities, including Joiner-Mover-Leaver processes, access reviews, RBAC, and privileged identity management.
• Collaborate with infrastructure, cloud, application, and security teams to embed identity capabilities into enterprise architectures and technology solutions.
• Support identity-related security initiatives, incident response, troubleshooting, and continuous improvement efforts.
• Evaluate emerging IAM technologies through proof-of-concepts, technical assessments, and security benchmarking to identify opportunities for modernization.
• Contribute to identity automation and operational efficiency through scripting, Infrastructure as Code, and repeatable engineering practices.

Requirements

• 7+ years of experience designing, implementing, and supporting enterprise identity and access management solutions.
• Strong hands-on expertise with Microsoft Entra ID, Microsoft 365, Okta, AWS IAM, and Azure identity services.
• Demonstrated experience with modern identity and authentication protocols, including SAML, OAuth 2.0, OpenID Connect, and SCIM.
• Strong understanding of Zero Trust architecture, identity governance and administration, privileged access management, cloud security, and least-privilege principles.
• Experience securing identity architectures across cloud platforms, SaaS applications, APIs, and AI-enabled applications, including workload identities and machine-to-machine authentication.
• Understanding of identity security for generative AI and AI agents, including secure access to AI platforms, API authorization, secret management, and governance of AI service identities.
• Experience integrating SaaS applications with enterprise identity providers and supporting complex enterprise identity environments.
• Experience with Infrastructure as Code and automation using PowerShell, Python, or similar technologies is preferred.
• Experience with hybrid identity environments and large-scale cloud migrations is advantageous.
• Relevant Microsoft, Okta, AWS, Azure Identity, or cloud security certifications are preferred.
• Familiarity with identity governance and administration platforms is a plus.
• Strong communication and stakeholder engagement skills, with the ability to translate business and security requirements into practical, scalable identity solutions.
• Ability to work collaboratively across security, engineering, infrastructure, cloud, and application teams while taking ownership of complex technical challenges.

Benefits

• Remote work: Fully remote opportunity available across all U.S. states.
• Competitive compensation: Salary and total compensation details are determined based on qualifications, experience, and applicable location.
• Technology-focused environment: Opportunity to work on modern IAM, cloud security, Zero Trust, automation, and AI identity challenges.
• Professional development: Exposure to emerging identity technologies, enterprise security architecture, and evolving AI security practices.
• Inclusive culture: Supportive and collaborative environment that values diverse perspectives and equal employment opportunities.
• Employee support: Workplace accommodations are available for qualified individuals with disabilities.
• Career growth: Opportunity to take ownership of enterprise-scale identity initiatives and influence long-term security architecture and engineering standards.