Senior Identity Engineer
Accountabilities: Design, implement, maintain, and continuously improve enterprise IAM solutions across Microsoft Entra ID, Microsoft 365, Okta, AWS, Azure, and SaaS environments.
Lead the engineering and operational support of identity services covering authentication, authorization, federation, SSO, MFA, lifecycle management, and privileged access.
Develop identity standards, reference architectures, engineering practices, and security controls aligned with Zero Trust and least-privilege principles.
Design and implement secure identity integrations for cloud platforms, applications, APIs, third-party services, and enterprise SaaS environments.
Build identity controls for AI platforms and services, including secure authentication, authorization, workload identities, API security, and access governance.
Partner with security and engineering teams to establish appropriate identity controls for AI agents, copilots, machine identities, and service accounts.
Engineer and support identity governance capabilities, including Joiner-Mover-Leaver processes, access reviews, RBAC, and privileged identity management.
Collaborate with infrastructure, cloud, application, and security teams to embed identity capabilities into enterprise architectures and technology solutions.
Support identity-related security initiatives, incident response, troubleshooting, and continuous improvement efforts.
Evaluate emerging IAM technologies through proof-of-concepts, technical assessments, and security benchmarking to identify opportunities for modernization.
Contribute to identity automation and operational efficiency through scripting, Infrastructure as Code, and repeatable engineering practices.
Requirements
7+ years of experience designing, implementing, and supporting enterprise identity and access management solutions.
Strong hands-on expertise with Microsoft Entra ID, Microsoft 365, Okta, AWS IAM, and Azure identity services.
Demonstrated experience with modern identity and authentication protocols, including SAML, OAuth 2.0, OpenID Connect, and SCIM.
Strong understanding of Zero Trust architecture, identity governance and administration, privileged access management, cloud security, and least-privilege principles.
Experience securing identity architectures across cloud platforms, SaaS applications, APIs, and AI-enabled applications, including workload identities and machine-to-machine authentication.
Understanding of identity security for generative AI and AI agents, including secure access to AI platforms, API authorization, secret management, and governance of AI service identities.
Experience integrating SaaS applications with enterprise identity providers and supporting complex enterprise identity environments.
Experience with Infrastructure as Code and automation using PowerShell, Python, or similar technologies is preferred.
Experience with hybrid identity environments and large-scale cloud migrations is advantageous.
Relevant Microsoft, Okta, AWS, Azure Identity, or cloud security certifications are preferred.
Familiarity with identity governance and administration platforms is a plus.
Strong communication and stakeholder engagement skills, with the ability to translate business and security requirements into practical, scalable identity solutions.
Ability to work collaboratively across security, engineering, infrastructure, cloud, and application teams while taking ownership of complex technical challenges.
Benefits
Remote work: Fully remote opportunity available across all U.S. states.
Competitive compensation: Salary and total compensation details are determined based on qualifications, experience, and applicable location.
Technology-focused environment: Opportunity to work on modern IAM, cloud security, Zero Trust, automation, and AI identity challenges.
Professional development: Exposure to emerging identity technologies, enterprise security architecture, and evolving AI security practices.
Inclusive culture: Supportive and collaborative environment that values diverse perspectives and equal employment opportunities.
Employee support: Workplace accommodations are available for qualified individuals with disabilities.
Career growth: Opportunity to take ownership of enterprise-scale identity initiatives and influence long-term security architecture and engineering standards.
How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether?
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
#LI-CL1