Senior Security Engineer, Identity

📋 Description

• Own Terraform for identity services: Okta applications, authorization servers, authentication
• Design and operate custom authorization servers, including audiences, scopes, claims, and access
• Implement app-to-app and agent access through Cross App Access (XAA) and ID-JAG, so delegated
• Own our IGA platform: the entitlement catalog, ownership, access requests, time-bound grants, and
• Build the agentic workflow that takes a team from 'I have a new group of people who need access to
• Build identity graphs with ISPM tooling to target overprivileged and long-standing access across

🎯 Requirements

• 6+ years in identity engineering or IAM, including operational ownership of Okta or an equivalent
• Deep understanding of OAuth 2.0, OIDC, SAML, and SCIM, including how custom authorization servers
• Working knowledge of how XAA and ID-JAG work under the hood, including token exchange and JWT
• Experience with ISPM or identity graph tooling, and turning its findings into automated remediation
• Experience owning an IGA platform or building the equivalent in-house
• Terraform experience managing identity providers, including module design, state, and CI

🎁 Benefits

• Flexible PTO
• Centralized home-office equipment ordering
• Health and wellness stipend
• Budget for intra-office travel
• Weekly coffee stipend
• 100% medical, dental & vision insurance coverage for you, with partial coverage for dependents