Senior Security Engineer – Identity and Access Management

🔥 20 hours ago

🌐 United States, United Kingdom, +1 more countries – Remote

🇺🇸 United States – Remote 🇬🇧 United Kingdom – Remote 🇳🇱 Netherlands – Remote

🏄 California, District of Columbia, +3 more states – Remote

🏄 California – Remote 🏛️ District of Columbia – Remote 🍂 Massachusetts – Remote 🤠 Texas – Remote ☕ Washington – Remote

💵 $180k - $220k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

HackerOne

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2012

💼 Consulting

🏥 Healthcare

📦 Logistics

💰 $49M Series E on 2022-01

Consulting • Healthcare • Logistics

HackerOne is a platform that connects businesses with ethical hackers to identify and fix security vulnerabilities. It offers services like bug bounty programs, pentest as a service, continuous security testing, vulnerability disclosure programs, AI safety and security testing, and application and cloud security. HackerOne engages a global community of ethical hackers who help businesses secure their digital assets by finding and addressing vulnerabilities. By leveraging both human and AI resources, HackerOne aims to outmatch cybercriminals and enhance security for various sectors, including automotive, financial services, government, healthcare, and retail. The company also provides educational resources, such as Hacker101, to train and develop the skills of people interested in cybersecurity.

📋 Description

• Own the identity lifecycle end to end for people, service accounts, and AI agents • Build automation that grants entitlements based on legitimate need and removes them automatically • Design and build access models based on data classification • Make time-bound access the default for critical data • Engineer identity as code with provisioning logic, entitlement policy, and access review rules under version control and testing across Okta, Lumos, and AWS IAM • Build AI and LLM-powered tooling for continuous access review and entitlement anomaly detection • Establish ownership, purpose, and expiry for service accounts, workload identities, integrations, and AI agents • Measure access and report opportunities to reduce unnecessary entitlements • Partner with Engineering, Enterprise IT, and Compliance to embed identity controls • Support identity-focused detection and incident response, including access containment, identity access reconstruction, and blameless retrospectives

🎯 Requirements

• 5+ years of experience in identity and access management, security engineering, or software engineering with substantial ownership of identity systems • Hands-on experience operating an enterprise identity provider such as Okta, including SAML, OIDC, SCIM, and lifecycle automation • Experience managing identity across an enterprise SaaS estate such as Google Workspace, Salesforce and Workday, including SCIM provisioning and group-driven entitlements • Experience with cloud IAM, ideally AWS, including policy design and short-lived credentials • Strong software engineering fundamentals with proficiency in Python, Go, or a similar language • Hands-on use of AI and LLM tooling and agentic coding tools in production engineering work • Preferred: identity work in a regulated sector and producing access control evidence for PCI DSS, HIPAA, SOC 2, or ISO 27001 audits • Preferred: identity infrastructure as code and access request or governance tooling such as Terraform and Lumos • Preferred: mobile device management alongside identity, such as Kandji integrated with Okta • Preferred: non-human, workload, and privileged access, including secrets management and service-to-service authentication • Preferred: building AI or LLM-powered tooling for security or identity workflows • Preferred: detection and incident response for identity-centered incidents • Industry certification in identity or security is preferred, such as IDPro CIDPRO, Okta certifications, AWS Certified Security – Specialty, or CISSP • Candidates must be located within approximately 50 miles of Austin, Seattle, Washington, DC, San Francisco, or Boston, or within commuting distance of the London or Netherlands locations • Visa/work permit sponsorship is not available • Employment is contingent on a background check

🏖️ Benefits

• Health (medical, vision, dental), life, and disability insurance • Equity stock options • Retirement plans • Paid public holidays and unlimited PTO • Paid maternity and parental leave • Leaves of absence, including caregiver leave and leave under CO's Healthy Families and Workplaces Act • Employee Assistance Program