Overview
Senior Security Engineer responsible for designing and automating identity and access management across people, service accounts, workload identities, and AI agents. The role focuses on least-privilege access, identity lifecycle controls, access reviews, and identity-focused detection and response.
What you'll do
- Own identity lifecycles from onboarding through removal.
- Design access models based on data classification.
- Implement time-bound access for critical data.
- Manage identity-as-code across Okta, Lumos, and AWS IAM.
- Build AI and LLM tooling for access reviews and anomaly detection.
- Assign ownership, purpose, and expiry to non-human identities.
- Support identity detection, incident response, and access reduction efforts.
What you'll need
- 5+ years in identity and access management, security engineering, or software engineering with substantial identity ownership.
- Hands-on enterprise identity provider experience, including Okta, SAML, OIDC, SCIM, and lifecycle automation.
- Experience managing identity across SaaS platforms such as Google Workspace, Salesforce, and Workday.
- Experience with cloud IAM, ideally AWS, including policy design and short-lived credentials.
- Proficiency in Python, Go, or a similar language.
- Production experience using AI, LLM, and agentic coding tools.
Nice to have
- Identity experience in a regulated sector and access-control audit evidence.
- Terraform, Lumos, or other identity infrastructure and governance tooling experience.
- MDM experience with device trust, platform SSO, and endpoint enrollment.
- Non-human identity, secrets management, and service-to-service authentication experience.
- Identity or security certifications such as CISSP or AWS Certified Security – Specialty.
Details
- Remote role targeted to candidates near Seattle, Washington, DC, Austin, San Francisco, Boston, London, or the Netherlands locations.
- Seattle or Washington, DC compensation: $180,000–$220,000 yearly, plus equity options.
Read the full description and apply on the company’s own careers page.