Security Engineer 5 - IAM
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Security Engineer 5 - IAM based in the United States.
This is a senior security engineering opportunity focused on designing and delivering identity and access management solutions at global scale.
You will help protect employees, contractors, and external partners while enabling secure and efficient access to critical applications and systems.
The role spans identity lifecycle management, federated authentication, provisioning, governance, compliance, and access controls.
You will work closely with security, engineering, business, and external technology partners to solve complex IAM challenges.
Your expertise will help reduce security risk while supporting the pace and evolving needs of a dynamic global organization.
The environment values pragmatic problem solving, technical ownership, collaboration, and thoughtful decision-making over rigid processes.
This is a fully remote role suited to a hands-on engineer who can architect sophisticated solutions while communicating complex security concepts clearly.
Accountabilities
Design, build, implement, and operate complex identity and access management security solutions supporting a global workforce and external partners.
Own and contribute to IAM solution design and delivery across implementation, integration, deployment, and rollout strategies.
Support workforce identity lifecycle processes from upstream human capital management systems through downstream internal and third-party applications.
Develop and improve solutions for federated authentication, user provisioning and deprovisioning, identity governance, compliance, and access management.
Integrate identity solutions with internal applications, business platforms, and third-party systems using standards-based approaches.
Partner with security and engineering teams to identify IAM risks and develop solutions that balance security requirements with business needs.
Collaborate with external vendors and service providers to integrate, troubleshoot, and enhance identity capabilities.
Contribute to identity integrations and migration initiatives associated with organizational acquisitions, applying scalable and sustainable integration patterns.
Work with modern IAM platforms and technologies, including solutions comparable to Okta Workflows, Okta Identity Engine, and Auth0.
Read, maintain, and occasionally contribute to internal codebases supporting identity and security capabilities.
Participate in CI/CD practices and deploy or operate IAM-related services on cloud platforms, particularly AWS.
Communicate complex identity and security concepts clearly to technical and non-technical stakeholders and help drive alignment on solutions.
Exercise independent judgment in ambiguous situations, proactively identifying problems and determining practical paths toward resolution.
Deep professional expertise in identity and access management, with a proven track record of architecting, building, and operating complex identity lifecycle and access-control solutions.
Strong understanding of authentication and authorization standards and protocols, including OpenID Connect, SCIM, OAuth, SAML, and LDAP.
Extensive experience across the workforce identity lifecycle, including identity creation, provisioning, deprovisioning, access management, and governance.
Hands-on experience with enterprise IAM platforms such as Okta Workflows, Okta Identity Engine, Auth0, or equivalent technologies.
Experience designing and implementing scalable identity integrations across internal and third-party applications.
Experience supporting identity integration and migration initiatives resulting from acquisitions is strongly preferred.
Knowledge of scalable integration patterns and IAM implementation best practices.
Experience with CI/CD and at least one modern programming language, with Java preferred and Python also relevant.
Comfortable reading existing codebases and contributing code when required.
Experience operating services on cloud computing platforms, particularly AWS.
Strong written and verbal communication skills, with the ability to explain complex IAM concepts in clear, accessible language.
Product-oriented mindset with a focus on practical solutions, user needs, and measurable security outcomes.
Strong collaboration and problem-solving skills, with the ability to work effectively across security, engineering, business, and external partner teams.
Comfortable working with ambiguity and exercising independent judgment without relying heavily on prescriptive processes.
Annual compensation range of $400,000-$680,000, with the actual range varying according to location, job family, background, skills, experience, and relevant market factors.
Compensation structure consisting of annual salary and stock options, with employees able to determine their preferred mix of salary and stock within the applicable compensation framework.
Comprehensive health insurance plans.
Mental health support and related well-being resources.
401(k) retirement plan with employer matching.
Stock option program.
Health Savings Accounts and Flexible Spending Accounts.
Family-forming benefits.
Disability programs.
Life and serious injury benefits.
Paid leave of absence programs.
Flexible time off for full-time salaried employees.
Fully remote work arrangement within the United States.
Opportunity to work on global-scale identity and security challenges across diverse business and technology environments.
Support for reasonable workplace accommodations during the hiring process when needed.