Senior Identity Security Engineer

CoStar Group

Confirmed live 2 days ago High trust

Quick summary

Work type
On-site
Location
Arlington, VASan Diego, CA
Salary
$133,000–$203,000 / yr
Posted
17 days ago
Freshness
Confirmed live 2 days ago

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $178k
This role $168k
$121k most similar roles pay here $226k

This role pays more than 50% of similar roles. Most pay $150,300–$204,825 — the shaded band above. At the midpoint, this role pays about $168k versus about $178k for comparable roles.

Based on 240 similar postings.

Employer

About CoStar Group

CoStar Group is the leading provider of commercial real estate information, analytics, and online marketplaces, including CoStar, Apartments.com, and LoopNet platforms. Industry: Commercial Real Estate Data & Analytics

CoStar Group currently has 65 open roles on FindRole.

Listed pay typically runs $133,000–$190,000 across 63 roles with salary data.

Most-posted roles

View all roles at CoStar Group

At a glance

TL;DR · Senior Identity Security Engineer

As a Senior Identity Security Engineer, you will join the security team to harden controls and ensure employees can securely connect to company resources through a zero trust, FIDO2 compliant framework. You will design and implement identity security controls across various platforms, develop conditional access policies for privileged roles and workload identities, and manage phish-resistant authentication rollouts. Your daily work involves analyzing logs, researching AI-assisted tooling to automate repetitive tasks, and participating in attack path management. The role requires expertise in SAML, OAuth, OIDC, Kerberos, and PKI, along with experience using Okta, PingID, Microsoft Entra ID, and Active Directory. You will utilize Python, PowerShell, or Bash for scripting while addressing risks like adversary-in-the-middle attacks and social engineering to secure a large technical infrastructure and corporate environment.

What you'll do

  • Design, implement, and improve identity security controls across various platforms.
  • Develop and maintain conditional access policies for privileged roles, sensitive applications, and workload identities.
  • Support an organization-wide rollout of multi-platform phish-resistant authentication.
  • Engineer security controls for AI and workload identities including service principals and OAuth registrations.
  • Research and operationalize AI-assisted tooling to automate repetitive analysis and identify risks.
  • Participate in attack path management using commercial and open-source tools.
  • Analyze logs to scope and guide the rollout of new security initiatives.
  • Document projects, standards, and runbooks for internal use.

What we're looking for

  • Bachelor's Degree from an accredited, not-for-profit, in-person university or college.
  • 4+ years of hands-on security engineering experience including the implementation of new controls to address threats.
  • Thorough understanding of AitM attacks, Evilgnx, and how to neutralize them through strong identity security hygiene.
  • Hands-on experience administrating industry-standard IDPs such as Okta, PingID, Microsoft Entra ID, or Active Directory.
  • Knowledge of authentication and authorization protocols including SAML, OAuth, OIDC, and Kerberos.
  • Firm understanding of PKI, FIDO2 framework, passkeys, Windows Hello for Business, Platform SSO, Okta FastPass, and Okta Device Trust.
  • Ability to read and author basic scripts in at least one common language such as Python, PowerShell, or Bash.
  • Experience with MDM platforms, identity security testing tools, CI/CD infrastructure, or AI/ML-assisted security tooling (preferred).

More like this

Similar roles

Senior Security Engineer, Identity

Anduril Industries

Costa Mesa, CA +2 99 days ago $166,000$220,000
Identity and Access Management Go Rust Terraform AWS CDK SAML OIDC SCIM OAuth Okta Azure AD CI/CD RBAC ABAC OPA Cedar AWS Azure GCP

Senior Ping Identity Engineer

Booz Allen Hamilton

Scott AFB, IL 3 days ago $86,800$198,000
Ping Federate Entra ID ADFS SAML 2.0 OAuth 2.0 OpenID Connect RBAC ABAC Active Directory LDAP Zero Trust MFA AWS Azure Google Cloud SCIM Okta Workflows Python PowerShell Bash

Ping Identity Engineer

Booz Allen Hamilton

Scott AFB, IL 3 days ago $86,800$198,000
Ping Federate Entra ID ADFS SAML 2.0 OAuth 2.0 OpenID Connect SSO RBAC ABAC Active Directory LDAP Zero Trust MFA SCIM Okta Workflows Python PowerShell Bash AWS Azure

Zero Trust Information Systems Security Engineer

Booz Allen Hamilton

Honolulu, HI 23 days ago $99,000$225,000
Zero Trust ICAM PAM Delinea SailPoint Radiant Logic Ping Federate Active Directory SAML OAuth 2.0 OpenID Connect NIST 800-207 Splunk Elastic Logstash Kibana Cribl Confluent PowerShell Ansible Terraform Python Puppet Chef IDS IPS Firewalls
3+ yrs exp

Identity Provider Operations Engineer

Booz Allen Hamilton

McLean, VA +1 9 days ago $86,800$198,000
PingFederate Okta Entra ID SAML 2.0 OAuth 2.0 OpenID Connect Python Java JavaScript PowerShell Groovy RESTful APIs Active Directory LDAP SCIM Zero Trust MFA AWS Cognito Azure AD B2C Google Cloud Identity CI/CD

Identity Provider Operations Engineer

Booz Allen Hamilton

Riverdale, MD +3 14 days ago $86,800$198,000
PingFederate Okta Entra ID SAML 2.0 OAuth 2.0 OpenID Connect Python Java JavaScript PowerShell Groovy RESTful APIs Active Directory LDAP SCIM Zero Trust MFA AWS Cognito Azure AD B2C Google Cloud Identity CI/CD