Senior Identity Security Engineer (Arlington, VA or San Diego, CA)
Core
Harden identity security controls and implement a zero trust, FIDO2 compliant framework to secure access for 8000 employees across a large technical infrastructure.
Role type
Senior Identity Security Engineer
Builds
Zero trust identity framework, conditional access policies, AI-assisted security tooling, and agentic workflows for identity risk analysis.
Domain
Cybersecurity / Identity and Access Management (IAM)
Deliverable
production ML models | infrastructure
Required skills
Identity security engineering, Zero Trust architecture, FIDO2, PKI, IDP administration (Okta, Entra ID, AD), SAML/OAuth/OIDC/Kerberos, SIEM log analysis, Python/PowerShell/Bash scripting, attack path management, adversary-in-the-middle mitigation.
Preferred skills
MDM platforms (Intune, Jamf), identity security testing tools (Bloodhound, AzureHound), CI/CD infrastructure, workload identity governance, AI/ML-assisted security tooling.
Responsibilities
Design and improve identity security controls; develop conditional access policies; analyze logs to guide security rollouts; engineer controls for AI and workload identities; research and operationalize AI-assisted tooling; document standards and runbooks; participate in attack path management.
Seniority
Senior, hands-on IC