Senior Security Engineer, Identity

Ramp

Confirmed live today High trust

Hybrid

Quick summary

Work type: Hybrid
Location: New York City, NY
Salary: $175,200–$240,900 / yr
Employment: Full-time
Posted: 2 days ago
Freshness: Confirmed live today
Nearby: 99+ roles within 25 mi

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $187k

This role $208k

$133k $252k

below market most similar roles pay here above market

This role pays more than 65% of similar roles. Most pay $154,450–$219,125 — the blue band above. At the midpoint, this role pays about $208k versus about $187k for comparable roles.

Based on 240 similar postings.

Employer

About Ramp

Ramp is a corporate spend management platform providing corporate cards, expense management, and accounts payable automation tools to help businesses control spending and operate more efficiently. Industry: Financial Technology & Corporate Spend Management

Ramp currently has 26 open roles on FindRole.

Listed pay typically runs $189,000–$325,000 across 22 roles with salary data.

Most-posted roles

View all roles at Ramp

At a glance

TL;DR · Senior Security Engineer, Identity

Role Posting Log in to save

The Senior Security Engineer, Identity joins the Corporate Security team to transform the company's identity and access layer into an IAM as a service platform. This hands-on role involves designing and coding identity configurations using Terraform for Okta, authorization servers, and SCIM provisioning. You will build agentic workflows for entitlement governance, implement app-to-app and agent access via Cross App Access and ID-JAG, and develop identity graphs using ISPM tooling to remediate overprivileged access. Key responsibilities include managing the IGA platform, building an identity data lake for an on-call agent, and designing custom authorization servers. Required expertise includes OAuth 2.0, OIDC, SAML, and SCIM, along with proficiency in Python or Go to build against platform APIs for human and non-human identities.

What does a Security Engineer earn?

Median $193000 from 105 postings across 40 companies.

See salary data

Skills

Okta Terraform Python Go IAM OAuth 2.0 OIDC SAML SCIM IGA JWT Cross App Access ID-JAG ISPM Google Workspace

What you'll do

Manage identity services including Okta applications, authentication policies, and SCIM provisioning using Terraform.
Design and operate custom authorization servers to manage audiences, scopes, claims, and access policies.
Implement app-to-app and agent access using Cross App Access and ID-JAG for governed delegated access.
Own the IGA platform, including the entitlement catalog, access requests, and time-bound grants.
Build agentic workflows to automate the provisioning and governance of new group entitlements.
Create identity graphs using ISPM tooling to identify and remediate overprivileged human and non-human identities.
Develop an identity data lake to power an on-call agent for automated troubleshooting of access errors.

What we're looking for

6+ years of experience in identity engineering or IAM.
Operational ownership of Okta or an equivalent identity provider at scale.
Deep understanding of OAuth 2.0, OIDC, SAML, and SCIM.
Working knowledge of XAA and ID-JAG, including token exchange and JWT bearer grants.
Experience with ISPM or identity graph tooling and automated remediation.
Experience owning an IGA platform or building an equivalent in-house.
Terraform experience managing identity providers, including module design, state, and CI.
Programming proficiency in Python or Go to build against platform APIs.

Similar roles