Principal Identity Engineer

Vaga não está no LinkedIn

🕒 Julho 8

🐊 Florida – Remoto

🐊 Florida – Remote

⏰ Tempo Integral

🔴 Especialista

🧑‍💻 Engenheiro Full-stack

Candidatar-se

Encontrar Vagas Remotas Similares

Configurar Alerta de Email para Novas Vagas

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo

The Leaflet

SiteLinkedInTodas as Vagas

11 - 50 funcionários

💼 Consultoria

⚖️ Jurídico

🔌 API

Consulting • Legal • API

Leaflet é uma biblioteca JavaScript de código aberto para construção de mapas interativos compatíveis com dispositivos móveis. É leve (aproximadamente 42 KB), projetada para simplicidade, desempenho e usabilidade, proporcionando recursos essenciais de mapeamento como camadas de mosaico, marcadores, camadas vetoriais, pop-ups e manipuladores de interação. Leaflet é altamente extensível através de um amplo ecossistema de plugins, bem documentada e mantida por uma ampla comunidade de colaboradores e organizações.

Descrição

• Own the security architecture, standards, authentication methods, and roadmap for Microsoft Entra ID, our primary identity provider — partnering with IT on tenant operations • Design and continuously refine Conditional Access policies that balance strong protection with a smooth experience for a globally distributed workforce • Advance our rollout of phishing-resistant, passwordless authentication (passkeys, certificate-based, FIDO2) • Own federation and single sign-on across our SaaS estate (SAML, OIDC, OAuth 2.0, SCIM provisioning) • Own our privileged access model using Microsoft Entra PIM — separate admin identities, just-in-time elevation, and approval workflows • Design and maintain break-glass procedures and safeguards for our most sensitive administrative paths • Reduce standing privilege across the environment and make "least privilege, just in time" the default • Automate the joiner-mover-leaver lifecycle so access is granted, changed, and revoked accurately and promptly • Build and run access reviews and entitlement governance, partnering with our GRC team on audit evidence (ISO 27001, SOC 2, PCI DSS, GLI-19/GLI-33) • Make access decisions auditable, explainable, and continuously right-sized • Govern service principles, managed identities, and workload/federated credentials across AWS, Azure, and GCP • Partner on secrets governance across our secrets management platforms to shrink the number of long-lived, standing secrets • Partner with our Principal Cloud & Network Security Engineer, who owns service-to-service authentication (mTLS, service mesh) • Serve as the identity authority for our Zero Trust program, aligned to NIST SP 800-207 and the CISA Zero Trust Maturity Model (Identity pillar) • Partner with our cloud and network security function on identity-aware access through Cloudflare Access • Partner with Security Operations to make identity signals (risky sign-ins, privileged elevation, MFA anomalies) first-class inputs to detection and response • Advise on customer identity (CIAM) and account-security architecture — partnering with our Principal Product Security Engineer, who owns the application security of player-facing account flows, and with product engineering

🎯 Requisitos

• 10+ years in identity and access management, security engineering, or a closely related field — or equivalent practical experience • Deep, hands-on expertise with a modern enterprise identity platform — Conditional Access, PIM/PAM, authentication methods, and identity governance (we run Microsoft Entra ID) • Strong command of identity protocols and patterns: SAML, OIDC, OAuth 2.0, SCIM, and modern MFA • Experience automating the identity lifecycle and integrating identity across a large SaaS and multi-cloud estate • Scripting and automation skills (PowerShell, Microsoft Graph API, Python) and comfort with Infrastructure as Code • A track record of designing least privilege, just-in-time access in a real production environment • Excellent written and verbal communication — you can explain an access decision to an engineer and a risk to an executive • Fluency with AI — you lead with it, reaching for AI tools daily to work faster and sharper; hands-on experience applying AI to security or engineering work is a must.

🏖️ Benefícios

• Competitive pay and benefits • Flexible vacation allowance • A hybrid / remote working environment • Startup culture backed by a secure, global brand