Principal Software Engineer (Identity Services)

Technical Skills/Competencies

• Prior experience as a team lead or people manager, with direct responsibility for engineer mentorship/development and team delivery
• Strong software engineering proficiency in Python and/or Go, beyond scripting and automation glue
• Expertise in Microsoft Active Directory and related components: Group Policy, LAPS, LDAP, AD-integrated DNS
• Experience with Privileged Access Management (PAM) solutions and strategies
• Practical knowledge of MFA best practices and hardware security key management (e.g., YubiKey)
• Experience with OAuth/OIDC/SAML authentication protocols and their security and engineering implications
• DevOps/SRE experience: GitLab CI/CD, IaC (Terraform, Ansible, or similar), monitoring and alerting (Prometheus, Grafana, Splunk), SRE principles
• Advanced Okta configuration and security hardening experience
• Familiarity with cloud IAM patterns on AWS (preferred) or GCP, with a security and engineering focus
• Experience with identity verification / IDV platforms (e.g., Persona) and self-service verification flows
• Experience designing or building internal developer portals, service catalogs, or self-service access tooling
• Solid grounding in Zero Trust architecture principles and hands-on implementation experience
• Experience working within Agile/SAFe frameworks including sprint planning and PI Planning
• Understanding of PCI-DSS compliance and security best practices in the context of identity systems
• Kubernetes and containerization experience (identity workloads increasingly run as containerized jobs/services)
• Experience with architectures for secure production access
• Experience owning a technical roadmap or strategic direction for a service or platform
• Familiarity with security frameworks and threat modeling methodologies
• Experience managing large-scale Linux & Windows infrastructure
• Experience with API design for identity and access-control integrations

Behavioral Skills/Competencies

• Player-coach: You lead a team and still ship. You get energy from both building great systems and growing great engineers, and you know when each is the job
• Builder's mindset: You ship things that work, get adopted, and make a lasting difference
• Security-first: Deeply concerned with the security and compliance implications of your systems; able to balance rigorous security requirements with operational and business needs
• Techical authority: Extremely knowledgeable on IAM and security subject matter; comfortable making and defending high-stakes architectural decisions and owning the roadmap behind them
• People-first leadership: Genuinely invests in the growth and wellbeing of team members; uses coaching to develop engineers' problem-solving and careers
• Autonomous and proactive: Drives your own work forward, identifies problems before they surface, and owns outcomes end-to-end
• Focused on quality: Committed to security, reliability, observability, and high standards of code quality and maintainability across everything the team builds