Senior IT Security Engineer

Alloy

Confirmed live yesterday High trust
Hybrid

Quick summary

Work type
Hybrid
Location
New York, NY
Salary
$162,000–$190,000 / yr
Posted
9 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $183k
This role $176k
$130k $235k
below market most similar roles pay here above market

This role pays less than 53% of similar roles. Most pay $150,499–$215,712 — the blue band above. At the midpoint, this role pays about $176k versus about $183k for comparable roles.

Based on 240 similar postings.

Employer

About Alloy

Alloy is an identity decisioning platform that provides fraud prevention, compliance, and credit underwriting solutions for banks, credit unions, and fintechs to automate identity verification decisions. Industry: Financial Technology & Identity Verification

Alloy currently has 13 open roles on FindRole.

Listed pay typically runs $163,000–$206,000 across 13 roles with salary data.

Most-posted roles

View all roles at Alloy

At a glance

TL;DR · Senior IT Security Engineer

The Senior IT Security Engineer joins the IT and Security team to manage workforce identity and access management. This role serves as the primary technical subject matter expert for Okta, overseeing groups, policies, MFA, and authentication controls. You will build and maintain automated joiner, mover, and leaver workflows using Okta Workflows, APIs, and scripts to connect HRIS systems with Google Workspace and downstream SaaS applications. Key responsibilities include managing SAML/OIDC integrations, SCIM provisioning, and privileged access management for production resources. You will also govern non-human identities, AI platform access, and endpoint security tools like EDR and DLP. This position ensures compliance with ISO 27001 and SOC 2 standards by enforcing least privilege and RBAC/ABAC within a regulated fintech environment.

What you'll do

  • Serve as the primary technical SME for workforce identity and access management using Okta.
  • Manage SaaS application onboarding, SSO integrations using SAML/OIDC, and SCIM provisioning.
  • Automate employee and contractor joiner/mover/leaver workflows using Okta Workflows and APIs.
  • Manage privileged access (PAM/TPAM) and non-human identities including service accounts and API credentials.
  • Enforce least privilege through RBAC/ABAC management and regular access reviews for ISO 27001 and SOC 2 compliance.
  • Troubleshoot authentication issues and provide support for endpoint security, EDR, and email security.
  • Investigate security incidents involving identity, endpoints, and SaaS applications.
  • Participate in the IT and Security on-call rotation to respond to critical alerts.

What we're looking for

  • Must have hands-on experience in IT or security engineering with significant responsibility for Okta or a comparable workforce identity provider.
  • Must have experience administering IdP groups, access and authentication policies, SaaS application assignments, MFA, and administrative roles.
  • Must have experience implementing and troubleshooting SAML/OIDC SSO, SCIM provisioning, and OAuth-based integrations.
  • Must have experience running employee and contractor identity lifecycles across HR systems, an IdP, Google Workspace, and downstream SaaS applications.
  • Must be able to automate access workflows using Okta Workflows, APIs, scripts, or comparable tools.
  • Must understand least privilege, RBAC/ABAC, access reviews, and account lifecycle controls.
  • Must have working familiarity with endpoint security, EDR, DLP, email security, and SaaS security tooling.
  • Must have experience with temporary privileged access management platforms (preferred).

More like this

Similar roles

Okta Identity Engineer

Elastic

Remote 100 days ago $94,300–$149,200
Okta SAML 2.0 OAuth SSO MFA SCIM Terraform REST APIs JSON Webhooks IDaaS Okta Workflows Infrastructure as Code Agile Identity Management FIDO RSA tokens
5+ yrs exp Remote

Identity and Access Management Specialist, Senior

Booz Allen Hamilton

Washington, DC +1 27 days ago
Identity and Access Management (IAM) SailPoint Okta Microsoft Entra ID PingIdentity CyberArk Microsoft Identity Manager (MIM) SAML OIDC OAuth RBAC ABAC Directory Services Federated Identity Management
5+ yrs exp

Identity and Access Management Specialist, Senior

Booz Allen Hamilton

Washington, DC +2 63 days ago
Identity and Access Management (IAM) SailPoint Okta Microsoft Entra ID PingIdentity CyberArk Microsoft Identity Manager (MIM) SAML OIDC OAuth RBAC ABAC Directory Services Federated Identity Management root‑cause analysis
5+ yrs exp

Senior Security Engineer

Green Dot Corp

Los Angeles, CA 142 days ago
Azure Network Security Penetration Testing CI/CD DevSecOps IAM NIST CIS Benchmarks OWASP SSDLC Azure Firewall Network Security Groups Key Vault Firewalls Security Architecture
5+ yrs exp Hybrid

Senior Security Engineer

CoStar Group

Arlington, VA +1 130 days ago $115,000–$203,000
AWS Network Security SaaS Security AI Security Python PowerShell Terraform Azure DevOps NGFW CASB SSE infrastructure-as-code OAuth Routing Load Balancers Threat Modeling
5+ yrs exp Hybrid

Senior Security Engineer

The Hartford

Hartford, CT +2 156 days ago
AWS GCP AI/ML Node.js NestJS Angular React Vue.js Kubernetes Docker CI/CD Splunk Dynatrace Orca Security Akamai SQL NoSQL GraphQL REST GitHub Copilot infrastructure‑as‑code Vulnerability Management Secure SDLC
6+ yrs exp Hybrid