Identity Security Distinguished Engineer

GEICO

Confirmed live today High trust

Quick summary

Work type
On-site
Location
Bethesda, MDPalo Alto, CARichardson, TXSeattle, WA
Salary
$140,000–$300,000 / yr
Employment
Full-time
Posted
19 days ago
Freshness
Confirmed live today

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $186k
This role $220k
$121k most similar roles pay here $319k

This role pays more than 76% of similar roles. Most pay $152,137–$220,000 — the shaded band above. At the midpoint, this role pays about $220k versus about $186k for comparable roles.

Based on 240 similar postings.

Employer

About GEICO

GEICO (Government Employees Insurance Company) is one of the largest auto insurers in the United States, offering affordable auto, home, renters, and other personal insurance products. Industry: Insurance

GEICO currently has 84 open roles on FindRole.

Listed pay typically runs $110,000–$230,000 across 81 roles with salary data.

Most-posted roles

View all roles at GEICO

At a glance

TL;DR · Identity Security Distinguished Engineer

The Identity Security Distinguished Engineer joins the Cybersecurity team to provide strategic and technical direction for identity and access management solutions across user, development, and production domains. This role serves as a technical lead for an engineering team focused on defensive controls, compliance automation, and modernizing identity strategy. The individual will build automated proof of controls, conduct advanced research, develop proofs of concept, and perform automated adversarial testing to ensure detection mechanisms function efficiently. Key technologies include Active Directory, Kerberos, LDAP, SAML, SCIM, OAuth, OIDC, and privileged access management tools. Required skills include expertise in Python or Go, cryptographic protocols like TLS and AES, and experience with Linux, Mac, Windows, and major IaaS platforms. The role addresses the challenge of balancing usability with security while protecting against modern threats through engineering excellence.

What you'll do

  • Provide strategic and technical direction for identity and access management (IAM) solutions across user, development, and production domains.
  • Lead a team of engineers to deliver secure IAM configurations and automated proof of security controls.
  • Develop and implement engineered automation to ensure compliance with industry regulations and frameworks without manual effort.
  • Conduct automated adversarial testing of identity systems to ensure detection mechanisms function efficiently.
  • Design and build scalable security systems using microservices, REST APIs, and multi-platform environments.
  • Create roadmaps for securing various identities while balancing security requirements with business usability.
  • Perform advanced research and develop proofs of concept to enhance overall security capabilities and efficiency.
  • Influence and educate stakeholders at all levels to promote a proactive, security-minded culture.

What we're looking for

  • Bachelor’s degree in Computer Science, Cyber Security, or equivalent education with work experience.
  • 8+ years of experience in a dedicated security role, preferably in the tech industry.
  • 5+ years of experience with security, identity, architecture, and design.
  • 3+ years of experience in a senior security role influencing company direction on strategy.
  • 3+ years of experience with AWS, GCP, Azure, or other cloud providers.
  • Extensive experience in identity products/protocols including Active Directory, Kerberos, LDAP, SAML, SCIM, OAuth, and OIDC.
  • Expertise in cryptographic protocols (X.509, TLS, AES), privileged access management tools, and multi-platform environments (Linux, Mac, Windows).
  • Proficiency in Python or Go, and knowledge of security frameworks like MITRE, CIS, and NIST; certifications such as CISSP, CISA, or CEH are preferred.

More like this

Similar roles

Cyber Security Identity Staff Engineer

GEICO

Bethesda, MD +3 62 days ago $110,000–$230,000
Identity and Access Management Active Directory Kerberos LDAP SAML SCIM OAuth OIDC Privileged Access Management REST APIs micro-services Linux Windows Python Go AWS GCP Azure MITRE CIS NIST
4+ yrs exp

Distinguished Engineer, AI Security

CVS Health

Remote (Scottsdale, AZ) 25 days ago $175,100–$334,750
AI Security Machine Learning Generative AI LLM Transformer-based NLP Zero Trust MITRE ATLAS NIST RMF Cloud Security Infrastructure Security Data Privacy PETs Threat Modeling Adversarial ML HIPAA GDPR
10+ yrs exp Remote

Distinguished Engineer, Application Security

CVS Health

Remote (AZ) 5 days ago $175,100–$334,750
SAST DAST SCA IAST RASP ASPM CI/CD Kubernetes Python Go Java TypeScript JavaScript C# REST GraphQL gRPC eBPF OWASP ASVS NIST SSDF SBOM SLSA GitHub Actions GitLab CI Jenkins Argo
10+ yrs exp Remote

Distinguished Engineer, Security Architecture

Nvidia

Remote (WA) 7 days ago $320,000–$488,750
Security Architecture Kubernetes Linux Cloud-native Threat Modeling Hardware Root of Trust Confidential Computing TPM HSM RDMA Attestation Detection and Response Go
10+ yrs exp Remote

Principal Enterprise Identity Engineer

Genentech

South San Francisco, CA 1 day ago $114,900–$263,500
SailPoint IdentityNow IdentityIQ Java Python AWS Azure GCP zero-trust CI/CD DevOps Microservices API Cybersecurity Identity Governance and Administration ISC
8+ yrs exp