Security Engineer III (~Senior Identity Security Engineer)
Core
Senior Identity Security Engineer responsible for administering IGA platforms, building PAM programs, and governing non-human and AI agent identities within a Zero Trust strategy.
Role type
Senior IC Identity Security Engineer
Builds
Enterprise Identity Governance and Administration (IGA) capabilities, Privileged Access Management (PAM) solutions, and governance frameworks for non-human and AI identities.
Domain
Cybersecurity, Identity and Access Management (IAM), Zero Trust
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
IGA platform administration (SailPoint), Privileged Access Management (PAM), Non-Human Identity (NHI) lifecycle management, AI agent identity security, Identity protocols (SAML, OAuth, OIDC, SCIM, LDAP), Cloud IAM (AWS, Microsoft Entra ID, GCP), Scripting (Python, PowerShell, Java)
Preferred skills
Experience with alternative IGA platforms (Saviynt, Omada), Enterprise secrets management (HashiCorp Vault, AWS Secrets Manager), NIST/ISO compliance frameworks
Technologies
SailPoint, AWS IAM, Microsoft Entra ID, GCP IAM, HashiCorp Vault, Python, PowerShell, Java
Responsibilities
Administer IGA platform (SailPoint) including lifecycle management and access certifications; Evaluate and implement PAM solutions for privileged account management; Develop governance frameworks for non-human identities (service accounts, API keys, secrets); Define and enforce identity policies for AI agents and automated workflows; Build automation scripts for identity provisioning and de-provisioning; Support access governance, SoD policies, and compliance audits (SOC 2, ISO 27001); Collaborate with cross-functional teams to design access models and communicate security risks.
Seniority
Senior, hands-on IC
