Senior Identity Governance Engineer

Location: US Remote

Salary: Zone 1: $134,500–$201,700 USD for CA, CT, DC, MD, MA, NJ, NY, VA, and WA; Zone 2: $125,700–$188,500 USD for all other US locations. International compensation varies by location.

Company

hirify.global builds a technology platform for the trades and is developing a next-generation identity fabric spanning cloud environments, SaaS applications, data systems, machine identities, and AI agents.

What you will do

• Engineer identity governance tooling, automation, and design standards for access requests, authentication, authorization, entitlements, and access reviews.
• Define governed workflows for privileged, role-based, time-bound, delegated, and just-in-time access, including monitoring for workflow bypass.
• Design authorization models and normalize entitlement data across systems such as ST Admin, Snowflake, Salesforce, and other high-risk platforms using Veza.
• Build access review, joiner/mover/leaver, privileged access, identity posture monitoring, and remediation automation for enterprise-scale governance.
• Govern service accounts, API keys, personal access tokens, workload identities, and AI agents through inventory, ownership, rotation, expiry, attestation, and remediation workflows.
• Partner with Corporate Engineering, Security Architecture, Product Security, Security Operations, InfoSec GRC, System Owners, auditors, and identity vendors on implementation, compliance evidence, and continuous governance.

Requirements

• 5+ years of experience in identity and access, with depth in Identity Governance & Administration.
• Deep understanding of lifecycle management, including Joiner/Mover/Leaver, RBAC/ABAC, entitlement modeling, Separation of Duties, privileged access governance, and the Principle of Least Privilege.
• Experience designing and automating enterprise-scale access certification programs.
• Hands-on experience with modern IGA and identity discovery tools, including Veza, Lumos, and Okta; experience administering an authorization graph platform such as Veza is especially valuable.
• Working knowledge of SSO, OIDC, SAML, SCIM, MFA, RBAC, and ABAC, with the ability to review enterprise integrations against these standards.
• Proven experience governing non-human identities in AWS or GCP environments, including service accounts, API keys, workload identities, inventory, ownership, rotation, expiry, attestation, and risk exceptions.
• Ability to read cloud IAM and secrets management configurations and partner with engineering teams operating those platforms.
• Understanding of identity security posture management, including identity drift, excessive entitlements, orphaned accounts, and misconfigurations.
• Ability to translate SOX ITGC, PCI DSS, SOC 2, and ISO 27001 requirements into identity controls, automated workflows, and audit-ready evidence, including direct work with auditors.
• Proficiency in Python or Go, API integration experience, and familiarity with workflow or low-code tooling.

Culture & Benefits

• Flexible time off, flextime, autonomous work support, learning and development opportunities, onboarding, and leadership training.
• Recognition programs, including Bonusly and peer-nominated awards.
• Company-paid medical, dental, and vision coverage, including employer-paid options and dependent coverage.
• FSA, HSA, 401(k) matching, telehealth, and One Medical memberships.
• Parental leave, fertility services support up to $20,000, surrogacy and adoption reimbursement, maternity support, breast milk shipping, pet insurance, legal advisory services, and financial planning tools.
• Commitment to inclusion, individuality, equal opportunity, and a diverse workplace.