Principal Security Engineer, Identity and Access Management

What you'll do

• Design and architect enterprise IAM solutions across cloud, on-premises, and hybrid environments.
• Set the technical strategy for zero trust identity, cloud IAM, and agentic identity frameworks.
• Define standards and governance for credentialing, authorizing, and auditing AI agents and automated services.
• Lead cross-functional identity architecture reviews and threat modeling for critical business systems.
• Develop enterprise IAM standards and reference architectures aligned with NIST and OAuth/OIDC protocols.
• Mentor IAM engineers and cybersecurity practitioners on identity-first security and non-human identity governance.
• Lead identity-related incident response efforts for credential compromises and privilege escalation events.
• Track and communicate IAM program metrics and risk posture to executive leadership and stakeholders.

What we're looking for

• Bachelor's degree in Computer Science, Information Security, Engineering, or a related field.
• Master's degree (preferred).
• 12+ years of experience in information security.
• At least 5 years of experience in identity & access management in a senior or principal technical leadership role.
• Deep expertise in workforce/customer identity, privileged access, identity governance, federation, directory services, and agentic identity patterns.
• Proven experience architecting IAM solutions in large-scale enterprise environments including AWS IAM, Azure Entra ID, and GCP IAM.
• Strong understanding of security standards including NIST 800-63, OAuth 2.0, OpenID Connect, SAML, SCIM, SPIFFE/SPIRE, and FIDO2/WebAuthn.
• Relevant certifications such as CISSP, GIAC, CCSP, OSCP, or equivalent advanced certifications.