Senior Security Engineer, Identity and Access Management

Overview

Senior Security Engineer responsible for designing and automating identity and access management across people, service accounts, workload identities, and AI agents. The role focuses on least-privilege access, identity lifecycle controls, access reviews, and identity-focused detection and response.

What you'll do

• Own identity lifecycles from onboarding through removal.
• Design access models based on data classification.
• Implement time-bound access for critical data.
• Manage identity-as-code across Okta, Lumos, and AWS IAM.
• Build AI and LLM tooling for access reviews and anomaly detection.
• Assign ownership, purpose, and expiry to non-human identities.
• Support identity detection, incident response, and access reduction efforts.

What you'll need

• 5+ years in identity and access management, security engineering, or software engineering with substantial identity ownership.
• Hands-on enterprise identity provider experience, including Okta, SAML, OIDC, SCIM, and lifecycle automation.
• Experience managing identity across SaaS platforms such as Google Workspace, Salesforce, and Workday.
• Experience with cloud IAM, ideally AWS, including policy design and short-lived credentials.
• Proficiency in Python, Go, or a similar language.
• Production experience using AI, LLM, and agentic coding tools.

Nice to have

• Identity experience in a regulated sector and access-control audit evidence.
• Terraform, Lumos, or other identity infrastructure and governance tooling experience.
• MDM experience with device trust, platform SSO, and endpoint enrollment.
• Non-human identity, secrets management, and service-to-service authentication experience.
• Identity or security certifications such as CISSP or AWS Certified Security – Specialty.

Details

• Remote role targeted to candidates near Seattle, Washington, DC, Austin, San Francisco, Boston, London, or the Netherlands locations.
• Seattle or Washington, DC compensation: $180,000–$220,000 yearly, plus equity options.