Senior Identity Security Engineer

📋 Description

• Own the IAM architecture, engineering, and operations for workforce and customer environments.
• Design, implement, and support Active Directory services and identity infrastructure.
• Design scalable identity architectures with AD, Okta, Auth0, AWS Cognito.
• Develop identity federation using SAML, OAuth2, OpenID Connect, SCIM, LDAP, Kerberos.
• Manage workforce identity services: AD, Entra ID, and Okta.
• Support customer identity platforms: Auth0 and AWS Cognito.

🎯 Requirements

• 7+ years in Identity and Access Management, security, or related fields.
• Expert-level Active Directory administration, architecture, and security.
• Hands-on with customer identity platforms (Auth0, AWS Cognito, Ping Identity, ForgeRock).
• Strong experience administering Okta environments.
• Strong understanding of SAML 2.0, OAuth 2.0, OpenID Connect, SCIM, LDAP, Kerberos.
• Experience with SSO, MFA, Conditional Access, and PAM.

🎁 Benefits

• Compensation: base salary and annual bonus opportunity.
• Benefits: health, dental, and vision; 401(k) and equity program; director-level equity.
• Flexible location: Remote days and 3 in-office days in Philadelphia area.
• Generous PTO: 4 weeks/year incl. vacation, personal, and sick time; paid parental leave.
• Parental Leave: 12 weeks for childbearing/adoption; 6 weeks for non-childbearing.
• Comprehensive onboarding: mentorship, talks, resources from day 1.