Senior Security Engineer, Identity and Access Management

About the role

The organization operates in the cybersecurity industry, specializing in Continuous Threat Exposure Management (CTEM). It addresses the challenge of continuously discovering, validating, prioritizing, and remediating exposures across code, cloud, and AI systems. The platform combines AI solutions with a large community of security researchers to reduce cyber risk for enterprises globally. The company serves major clients across various sectors, including government and private industry, and is recognized for leadership in AI security testing.

The SENIOR SECURITY ENGINEER, IDENTITY AND ACCESS MANAGEMENT role is focused on designing and delivering automated access models that ensure secure and appropriate data access for people, service accounts, and AI agents. This position impacts the organization by enhancing identity lifecycle management through automation and AI, promoting least privilege principles, and improving security posture. The role contributes to scaling the organization's identity and access management capabilities and supports secure, efficient access controls.

Responsibilities

• Manage the full identity lifecycle from onboarding to removal for human and non-human identities.
• Develop automated entitlement granting and removal processes based on verified need.
• Design access models that align identity reach with data classification.
• Implement default time-bound access for sensitive data.
• Engineer identity management as code with version control and testing.
• Build AI-powered tools for continuous access review and anomaly detection.
• Apply consistent management to service accounts, workload identities, and AI agents.
• Measure and report on access to identify opportunities to reduce unnecessary entitlements.
• Collaborate with Engineering, IT, and Compliance teams to embed identity controls and support incident response.

Requirements

• Over 5 years of experience in identity and access management, security engineering, or software engineering with significant ownership of identity systems.
• Hands-on experience with enterprise identity providers such as Okta, including SAML, OIDC, SCIM, and lifecycle automation.
• Experience managing identity across enterprise SaaS environments.