Staff Security Engineer (IAM)
Core
Staff Security Engineer leading Identity and Access Management (IAM) security strategy, infrastructure, and incident response for a global fintech organization.
Role type
Staff Security Engineer (IAM)
Builds
Enterprise Identity Provider, PKI, X.509 certificate lifecycle automation, mutual TLS, credential management systems, and security engineering frameworks.
Domain
Financial Technology / Cybersecurity
Required skills
IAM and authentication protocols (OIDC, OAuth 2.0, SAML 2.0, FIDO2/WebAuthn, mTLS, PKI), software engineering, threat modeling, technical incident response, strategic communication, mentorship
Preferred skills
Financial services experience, enterprise Identity Provider administration (Okta, Keycloak), Zero Trust architecture, third-party security controls, community contributions
Technologies
OIDC, OAuth 2.0, SAML 2.0, FIDO2, WebAuthn, mTLS, PKI, Okta, Keycloak
Responsibilities
Define and execute multi-year IAM security strategy; lead organization-wide authentication migrations; design and maintain core identity infrastructure; translate least-privilege access into measurable programs; design security engineering frameworks; lead technical incident response for identity events; facilitate large-scale preparedness exercises; provide technical mentorship; serve as technical authority with Legal, Compliance, and regulators
Seniority
Staff, hands-on IC with organizational-level influence