Senior Identity Engineer, Workforce Identity
About the role
The Senior Identity Engineer serves as a senior technical leader for enterprise and customer-facing Identity and Access Management (IAM) solutions. In this role, you will design, implement, and optimize secure identity architectures that enable seamless, resilient, and compliant access for our workforce and customers. You will drive key initiatives such as passwordless authentication, privileged access management (PAM), and modern identity integrations, ensuring alignment with compliance frameworks like FedRAMP, SOC 2, and SOX.
Responsibilities
- Design, implement, and support IAM solutions using Okta, Auth0, and Identity Governance and Administration (IGA) tools.
- Integrate and maintain identity systems with Active Directory, Microsoft Entra ID (formerly Azure AD), and other directories.
- Build and maintain secure integrations using SCIM, REST APIs, and custom connectors.
- Partner with compliance and audit teams to support identity-related controls and evidence collection.
- Serve as the subject matter expert (SME) for complex IAM issues, providing Tier-3 troubleshooting and incident resolution.
- Lead upgrades, migrations, and adoption of emerging identity technologies, including Okta Identity Engine (OIE).
- Deploy and manage PAM solutions to secure administrative accounts and enforce least-privilege principles.
- Ensure adherence to internal security policies and regulatory requirements (e.g., SOX, GDPR).
- Work closely with Security, Infrastructure, Cloud, and DevOps teams to ensure IAM solutions align with enterprise architecture and regulatory requirements.
Qualifications
- 5+ years of experience in Identity and Access Management or related IT support roles.
- Hands-on experience with identity platforms such as Microsoft Entra ID, Okta, and Active Directory.
- Deep expertise in Okta, Auth0, IGA, CIAM, PAM, and passwordless solutions.
- Strong understanding of identity protocols (OIDC, SAML, SWA, MFA) and identity lifecycle management practices.
- Familiarity with privileged access management tools (e.g., CyberArk, BeyondTrust).
- Strong analytical and troubleshooting skills with the ability to resolve identity-related incidents.
- Understanding of compliance frameworks and security best practices.
- Proven ability to work independently in a fast-paced, regulated environment.
- Strong communication, customer service, and collaboration skills with a passion for identity security.
- Bachelor's degree in Information Systems, Computer Science, or a related field (or equivalent experience).
Preferred Qualifications
- Experience with automation tools (e.g., Okta Workflows, PowerShell/Python scripting).
- Knowledge of Zero Trust principles and identity governance.
- Security certifications such as CISSP, CISM, or equivalent.
Pay
The annual base pay for this position is: $140,800.00 - $211,200.00
Benefits
Please note that F5 only contacts candidates through F5 email address (ending with @f5.com) or auto email notification from Workday (ending with f5.com or @myworkday.com). For more details about F5’s benefits, please visit: here.
Equal Employment Opportunity
It is the policy of F5 to provide equal employment opportunities to all employees and employment applicants without regard to unlawful considerations of race, religion, color, national origin, sex, sexual orientation, gender identity or expression, age, sensory, physical, or mental disability, marital status, veteran or military status, genetic information, or any other classification protected by applicable local, state, or federal laws. This policy applies to all aspects of employment, including, but not limited to, hiring, job assignment, compensation, promotion, benefits, training, discipline, and termination. F5 offers a variety of reasonable accommodations for candidates. Requesting an accommodation is completely voluntary. F5 will assess the need for accommodations in the application process separately from those that may be needed to perform the job. Request by contacting accommodations@f5.com.