{"id":2558039,"url":"https://alion.io/job/opendoor-enterprise-iam-security-engineer","title":"Enterprise IAM Security Engineer","company":{"id":2680,"name":"Opendoor","domain":"opendoor.com","url":"https://alion.io/company/opendoor-labs-inc","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Schema","truth_index":{"grade":"A","score":95,"open_postings":32,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":108,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Okta","optional":false},{"name":"Python","optional":false},{"name":"Terraform","optional":false},{"name":"TypeScript","optional":false},{"name":"Anthropic","optional":true},{"name":"Datadog","optional":true},{"name":"DLP","optional":true},{"name":"GitHub","optional":true},{"name":"Google Workspace","optional":true},{"name":"OpenAI","optional":true},{"name":"SOC 2","optional":true}],"status":"live","first_seen_at":"2026-10-14T12:58:41Z","employer_posted_date":"2026-10-14","last_verified_at":"2026-10-16T19:29:24Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":2},"description":"About Opendoor\nAt Opendoor our mission is to tilt the world in favor of homeowners and those who aim to become one. Homeownership matters. It's how people build wealth, stability, and community. It's how families put down roots, how neighborhoods strengthen, how the future gets built. We're building the modern system of homeownership giving people the freedom to buy and sell on their own terms. We’ve built an end-to-end online experience that has already helped thousands of people and we’re just getting started.\nAbout the role\nOur Security Engineering team builds intelligent systems that protect Opendoor and our customers while enabling unprecedented engineering velocity. We apply software engineering and AI to solve security problems across product, infrastructure, and operations, building guardrails precisely where they matter.\nIdentity is the front door to every system an employee or contractor touches, and this role owns it. You design and build the platform that decides who gets access to what, and you write the code that runs it. You own the technical direction for identity and build alongside peer specialists covering the rest of the enterprise security surface.\nWhat you'll do\nOwn the identity control plane end to end, working alongside peers who own other parts of the enterprise security surface: design, build, and operate the systems that authenticate and authorize every employee and contractor.\nOwn passwordless authentication (e.g. passkeys) for the workforce, across employee and contractor identities.\nDefine enrollment rules for which authentication methods are required, optional, or disallowed by population, setting the assurance bar before a user ever reaches session or app-level policy.\nDesign authenticator assurance tiers and tune session policy: session lifetime, idle timeout, and step-up re-authentication scaled to the risk of what's being accessed.\nBuild per-application authentication policies that weigh device posture, network context, and risk signals to decide when a phishing-resistant factor or a fresh re-authentication is required, with a fast exception path for when a legitimate user gets stuck.\nOwn the non-human identity inventory: service accounts, API keys, and workload identities, each tracked, owned, and issued short-lived, federated credentials with automatic expiry.\nTreat AI agents as their own identity class: scoped, single-use credentials per action, clear delegation from the human or system they act for, and an audit trail granular enough to attribute every individual action.\nManage identity configuration as code, shipping and reviewing every change through pull requests, so a bad policy change is as easy to revert as it was to ship.\nBuild first-party tooling that extends commercial identity platforms: lifecycle automation, access governance workflows, provisioning, and custom integrations across the workforce SaaS stack.\nOwn the technical direction for identity, contribute to the broader security engineering roadmap, and ship the critical infrastructure that strengthens the security posture.\nFeed high-fidelity identity telemetry, auth events, anomalous access, lifecycle changes, into the detection and response pipeline, and support incident response when identity is in the blast radius.\nEstablish secure-by-default standards for new SaaS and AI tools employees adopt, enforced directly at the identity layer.\nMentor engineers across security and IT on identity engineering patterns; build automation and guardrails other teams build on top of.\nWhat you'll need\nDeep conviction that AI and automation should eliminate manual work, with a proven track record building agentic systems.\nHas designed, built, and operated a workforce identity platform at enterprise scale, with deep hands-on Okta engineering expertise: building automation and API-driven integrations on top of the platform.\nHas shipped a passkey rollout on Okta at enterprise scale, and knows where WebAuthn and FIDO2 adoption breaks in the real world and how to fix it.\nManages identity infrastructure as code: writes and reviews Terraform, or an equivalent IaC tool, for identity systems, and ships changes through pull requests.\nStrong software engineering ability in Python, Go, or TypeScript, building first-party tooling and API-driven automation on top of the identity platform.\nIdentity-first mindset: SSO, SAML, OIDC, and SCIM provisioning, conditional access, and least privilege applied at scale, across both employees and contractors.\nHigh autonomy; sets the roadmap and the right path forward in ambiguous territory, and personally executes against it.\nBusiness-enablement mindset; success measured by adoption and impact.\nHumility and curiosity; builds guardrails and automation that make it easier for other teams to move fast securely.\nNice to have\nHands-on Google Workspace administration and automation (Admin SDK, directory sync, DLP) alongside Okta.\nExperience tying device trust or posture signals to access decisions, identity-aware proxy patterns.\nSOC 2 or SOX access-control evidence experience.\nContributions to open source identity tooling or the Okta Terraform provider ecosystem.\nTech stack\nOkta, Okta Workflows, Google Workspace, Terraform, Python, Go, TypeScript, GitHub, WebAuthn, FIDO2, SAML, OIDC, SCIM, Datadog, AI tooling (OpenAI, Anthropic).\nApplication Tip: Interested in sharing your technical work? You are welcome to add your GitHub profile or links to projects you've built in the 'Websites' section.\nLocation\nThis role is based in one of our offices, in-person four days per week. We're looking for candidates who are enthusiastic about an in-office culture; people who want to build alongside their teammates, not from a distance.","description_format":"text","description_chars":5730,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Residential Real Estate","PropTech"],"lifecycle":[{"event":"open","at":"2026-10-14T19:50:30Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":2,"expected_fill_days":108,"reasons":["conf:10","win:early"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/opendoor-enterprise-iam-security-engineer","json_url":"https://alion.io/job/opendoor-enterprise-iam-security-engineer.json","meta":{"generated_at":"2026-10-17T17:31:02Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":24059,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2680},"rest":"https://alion.io/mcp/rest/get_company?id=2680"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fopendoor-enterprise-iam-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fopendoor-enterprise-iam-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fopendoor-enterprise-iam-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/opendoor-enterprise-iam-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fopendoor-enterprise-iam-security-engineer"}]}