Senior Security Engineer, Workforce Security - Identity, Access and Authorization

Intuit

Confirmed live today High trust

Quick summary

Work type
On-site
Location
San Diego, CAMountain View, CA
Salary
$161,000–$218,000 / yr
Posted
24 days ago
Freshness
Confirmed live today

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $187k
This role $190k
$135k $237k
below market most similar roles pay here above market

This role pays more than 52% of similar roles. Most pay $152,988–$220,305 — the blue band above. At the midpoint, this role pays about $190k versus about $187k for comparable roles.

Based on 240 similar postings.

Employer

About Intuit

Intuit is a financial software company known for products like TurboTax, QuickBooks, Mint, and Credit Karma, helping consumers and small businesses manage their finances and taxes. Industry: Financial Software & Technology

Intuit currently has 253 open roles on FindRole.

Listed pay typically runs $202,500–$274,000 across 236 roles with salary data.

Most-posted roles

View all roles at Intuit

At a glance

TL;DR · Senior Security Engineer, Workforce Security - Identity, Access and Authorization

The Senior Security Engineer - Workforce Security - Identity, Access and Authorization joins the Enterprise Identity & Access Management team to build systems governing cloud access. This hands-on role involves designing and building back-end services, APIs, and policy engines using Java, Spring, and Python, alongside React front-ends. You will develop fine-grained authorization models, including ABAC, policy-as-code, and just-in-time access, while integrating with AWS IAM, GCP IAM, SAML, OIDC, and OAuth 2.0. The work addresses the technical challenge of replacing coarse role checks with provable, real-time decisions for humans and workloads. Key responsibilities include threat modeling, automating SOX compliance evidence, and managing machine identities. You will also integrate GenAI tooling and orchestrate agents to solve complex security risks and ensure least-privilege access across the cloud footprint.

What does a Security Engineer earn in California?

Median $200125 from 40 postings across 16 companies.

See salary data

What you'll do

  • Design and build back-end services, APIs, and policy engines using Java, Spring, and Python.
  • Develop React front-end experiences for engineers and auditors to manage and understand access controls.
  • Implement fine-grained authorization models including ABAC, policy-as-code, and just-in-time access.
  • Integrate deeply with AWS IAM/STS, GCP IAM, SAML, OIDC, and OAuth 2.0 protocols.
  • Threat model systems for privilege escalation, policy bypass, and dependency compromise.
  • Automate control testing and continuous evidence collection for SOX and other regulatory requirements.
  • Integrate GenAI tooling and orchestrate agents across the design, development, and operations lifecycle.
  • Own observability, alerting, and monitoring for all security services after production release.

What we're looking for

  • 5+ years of professional experience building and shipping production software, with meaningful time spent on security-relevant systems.
  • BS/MS in Computer Science, a related field, or equivalent practical experience.
  • Full-stack development experience with Java, Spring, Python, and React (Angular acceptable).
  • Deep hands-on experience with AWS or GCP identity and access primitives.
  • Production experience with RBAC, ABAC, SSO, SAML, OIDC, OAuth 2.0, and token/credential lifecycles.
  • Experience with datastore and database schema and query design under real scale and latency constraints.
  • Experience using AI developer tools and agents in an engineering workflow (preferred).
  • Experience with policy-as-code using OPA, Rego, AWS Cedar, or Zanzibar-style authorization (preferred).

More like this

Similar roles

Staff Security Engineer, Identity Access Management

Snap Inc.

Bellevue, WA +3 5 days ago $251,000–$377,000
Identity and Access Management AWS GCP Distributed Systems Cloud Security Authentication Authorization Access Policy Design Least-Privilege Access Governance Observability
9+ yrs exp Hybrid

Senior Security Engineer, Identity

Anduril Industries

Washington, District of Columbia +1 33 days ago $166,000–$220,000
Identity and Access Management Go Rust Terraform AWS CDK SAML OIDC SCIM OAuth Okta Azure AD CI/CD AWS Azure GCP RBAC ABAC OPA Cedar Policy-as-Code

Senior Security Engineer, Identity

Anduril Industries

Boston, MA +1 33 days ago $166,000–$220,000
Identity and Access Management Go Rust Terraform AWS CDK SAML OIDC SCIM OAuth Okta Azure AD CI/CD RBAC ABAC OPA Cedar AWS Azure GCP Infrastructure as Code

Senior Security Engineer, Identity

Anduril Industries

Seattle, WA +1 33 days ago $166,000–$220,000
Identity and Access Management Go Rust Terraform AWS CDK SAML OIDC SCIM OAuth Okta Azure AD CI/CD AWS Azure GCP RBAC ABAC OPA Cedar Infrastructure as Code

Senior Security Engineer, Identity

Anduril Industries

Costa Mesa, CA 157 days ago $166,000–$220,000
Identity and Access Management Go Rust Terraform AWS CDK SAML OIDC SCIM OAuth Okta Azure AD CI/CD RBAC ABAC OPA Cedar AWS Azure GCP

Cyber Security Engineer, Senior Consultant

Visa

Foster City, CA 159 days ago $180,600–$289,300
Python Go AWS Azure GCP Terraform GenAI LLM GitOps Infrastructure‑as‑Code policy‑as‑code OPA Rego Sentinel CSPM CNAPP SIEM Wiz Prisma Cloud Microsoft Defender for Cloud Sumo Logic ADX API IAM
8+ yrs exp Hybrid