Senior Identity Governance Engineer

Job not on LinkedIn

🔥 1 minute ago

🇺🇸 United States – Remote

💵 $125.7k - $201.7k / year

⏰ Full Time

🟠 Senior

🎲 Risk

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

ServiceTitan

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2012

💼 Consulting

📦 Logistics

📣 Marketing

💰 $200M Series G on 2021-06

Consulting • Logistics • Marketing

ServiceTitan is a comprehensive software platform designed for the trades industry, providing solutions to enhance productivity and profitability for businesses. It offers a variety of features including dispatching, scheduling, marketing, reporting, and customer experience tools, tailored for trades like plumbing, HVAC, electrical services, and more. ServiceTitan seeks to empower businesses by optimizing operations, improving cash flow, and delivering superior customer experiences through an all-in-one platform. The software includes real-time data analytics, financing options, and mobile capabilities to support the operational needs of contractors and increase their revenue streams. By consolidating multiple business functions into a single platform, ServiceTitan aims to help contractors grow profitably and efficiently.

📋 Description

• Engineer identity governance tooling, automation, and design standards • Define governance requirements and design patterns for access request workflows across privileged systems • Design role-based, time-bound, delegated, and just-in-time access workflows • Measure workflow adoption and detect access-request bypasses • Define authentication and authorization standards for enterprise tools • Review integrations against SSO, MFA, OIDC, SAML, SCIM, and least-privilege standards • Design authorization decisions, job-function role models, and privileged data entitlements • Normalize entitlement data across applications in Veza • Build and operate access-review and lifecycle-assurance tooling for SOX ITGC, PCI DSS, SOC 1/2, and ISO 27001 • Automate joiner/mover/leaver assurance, leaver access-reversion evidence, HR reconciliation, and orphaned-account detection • Build visibility into standing privileged access and drive adoption of PIM and JIT elevation • Define target-state governance architecture across Okta, Veza, and Lumos • Administer Veza and build its data-source integrations, policies, and alerts • Build continuous identity monitoring and analytics for over-privileged accounts, shadow identities, dormant access, and identity drift • Automate remediation workflows with named owners • Govern service accounts, API keys, personal access tokens, and AI agents, including ownership, rotation, and attestation • Provide identity evidence for audits and automate evidence collection • Partner with engineering, security, system owners, and vendors on identity governance implementation and adoption

🎯 Requirements

• 5+ years in identity and access, with depth in Identity Governance & Administration • Experience in identity and access engineering, including SSO, provisioning, directory, or identity platform automation • Deep understanding of Joiner/Mover/Leaver lifecycle management, RBAC/ABAC, entitlement modeling, Separation of Duties, privileged access governance, and Principle of Least Privilege • Ability to design and automate enterprise-scale access certification programs • Hands-on experience with Veza, Lumos, Okta, or comparable modern IGA and identity discovery tools • Experience administering an authorization graph platform such as Veza • Working knowledge of SSO, OIDC, SAML, SCIM, MFA, RBAC, and ABAC • Proven experience governing non-human identities in cloud-native AWS/GCP environments • Ability to read cloud IAM and secrets management configurations • Understanding of ISPM principles, identity drift, excessive entitlements, orphaned accounts, and misconfigurations • Ability to translate SOX ITGC, PCI DSS, SOC 2, and ISO 27001 requirements into identity controls and audit-ready evidence • Comfortable working directly with internal and external auditors • Proficiency in a scripting language such as Python or Go • API integration experience • Familiarity with workflow or low-code tooling • Ability to work with security, engineering, system-owner, and vendor teams

🏖️ Benefits

• Flexible time off • Learning and development opportunities • Comprehensive onboarding program • Leadership training • Programs and events • Bonusly rewards • Peer-nominated awards • Company-paid medical, dental, and vision insurance • 100% employer-paid options and 90% dependent coverage • FSA and HSA • 401(k) match • Telehealth options including One Medical memberships • Parental leave and support • Up to $20k in fertility services, including IUI and IVF • Surrogacy and adoption reimbursement • On-demand maternity support through Maven Maternity • Free breast milk shipping through Maven Milk • Pet insurance • Legal advisory services • Financial planning tools • Annual bonus • Equity • Flexible/autonomous work support