Назад
Company hidden
2 дня назад

Lead Security Engineer (IAM)

116 000 - 170 000$
Формат работы
hybrid
Тип работы
fulltime
Грейд
lead
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Lead Security Engineer (IAM): Designing, implementing, and modernizing enterprise identity solutions across Okta, Microsoft Entra ID, and AWS with an accent on authentication, authorization, access governance, and automation. Focus on architecting SSO and MFA integrations, building identity lifecycle and least-privilege controls, and leading complex IAM modernization and security operations.

Location: Hybrid, Irving, TX, United States

Base salary: USD 116,000–170,000 annually

Company

hirify.global provides analysis and business and technology insights to enterprise leaders and their teams, supporting clients in approximately 90 countries and territories.

What you will do

  • Lead the design, implementation, support, and modernization of enterprise IAM solutions across Okta, Microsoft Entra ID, AWS, and other identity platforms.
  • Design and implement SSO, MFA, Conditional Access, authentication policies, RBAC, PIM, least-privilege controls, and access governance capabilities.
  • Architect identity integrations using SAML, OAuth 2.0, OIDC, SCIM, LDAP, and REST APIs.
  • Develop IAM automation with Python, PowerShell, source control, CI/CD tools, and cloud-native capabilities.
  • Partner with security, infrastructure, application, and cloud teams to onboard applications, troubleshoot complex identity issues, and support audit, compliance, and risk activities.
  • Lead IAM projects, document architectures and standards, mentor engineers, evaluate emerging technologies, and drive adoption of security best practices.

Requirements

  • 8+ years of IAM experience in enterprise environments.
  • Strong understanding of IAM concepts, standards, authentication, authorization, lifecycle management, and access governance.
  • Hands-on experience with SSO libraries and secure integrations using SAML, OAuth 2.0, OIDC, and SCIM, including technical guidance for developers.
  • Hands-on experience configuring, deploying, and managing MFA solutions and policies.
  • Extensive Okta experience covering authentication and authorization policy design, SSO integrations, Lifecycle Management, identity governance, and access controls.
  • Strong Microsoft Entra ID knowledge covering tenant administration, Conditional Access, MFA and authentication methods, RBAC, PIM, and identity security controls.
  • Experience building IAM automation with Bitbucket, Jenkins, and CloudBees, plus strong Python and PowerShell scripting skills.
  • Experience designing, developing, and deploying automation across Microsoft Entra ID and AWS environments.
  • Experience with SIEM platforms, including dashboard design and visualization of security KPIs, metrics, and threat trends.
  • Ability to lead projects independently, manage stakeholder expectations, and mentor junior engineers and team members.

Nice to have

  • Experience with Identity Governance and Administration platforms.
  • Understanding of Zero Trust architecture and modern identity security frameworks.
  • Experience designing and supporting high-availability and disaster recovery architectures for identity platforms.
  • Experience in Agile/Scrum environments and leading cross-functional initiatives.
  • Understanding or experience in AI identity security.
  • Experience managing Active Directory and LDAP.
  • Experience with Infrastructure as Code tools such as Terraform.

Culture & Benefits

  • Hybrid work environment combining virtual work with collaboration in company offices.
  • Collaborative, inclusive, action-oriented, and intellectually curious culture.
  • 20+ PTO days, holidays, floating holidays, parental leave, and health-and-wellness allowances.
  • Medical, dental, and vision insurance, plus a 401(k) with corporate match and immediate vesting.
  • Tuition reimbursement, Employee Stock Purchase Plan, Employee Assistance Program, and charity matching.
  • Growth and learning opportunities with the opportunity to contribute to AI and technology-focused work.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →