Senior Engineer, IT Security

Responsibilities

• Partner with engineering teams to design secure architectures and solutions
• Integrate security controls into CI/CD pipelines, platform tooling, and application onboarding processes
• Provide technical guidance and reusable patterns for secure development
• Own and improve the application onboarding and identity integration process
• Translate security requirements into practical, scalable, and automated controls
• Collaborate closely with developers while maintaining clear ownership within the Security team

Qualifications

• 5–8+ years of hands-on experience in security engineering with a direct focus on IAM and DevSecOps practices
• Proven, hands-on administration and engineering experience with Okta, including: Okta Identity Cloud (OIC), Okta Identity Governance (OIG), Okta Workflows, application onboarding, lifecycle management, and policy enforcement
• Strong, hands-on cloud administration experience in Microsoft Azure (required), including identity, access control, and resource governance
• Working knowledge of AWS and Google Cloud Platform in multi-cloud environments
• Hands-on experience with Kubernetes (K8s), including workload identity, access controls, and platform security considerations
• Working knowledge of Splunk Cloud, including building alerts, dashboards, and detection logic for security-relevant events
• Strong understanding of modern authentication and authorization standards, including OAuth2, OIDC, and SAML
• Proficiency in Python scripting for automation, integration, and operational tooling
• Demonstrated experience integrating security into CI/CD pipelines and infrastructure-as-code workflows
• Demonstrated experience designing and implementing RBAC/ABAC models across cloud and SaaS platforms
• Demonstrated experience performing threat modeling (e.g., STRIDE, attack trees) and translating findings into actionable engineering controls