Senior Identity Engineer

This is a fully remote position, open to applicants in United States, +6 more states.

📋 Description

• Evaluate and enhance Later’s security framework across applications, infrastructure, and development processes.

• Establish and enforce scalable security protocols, guidelines, and best practices through automated and verifiable solutions.

• Collaborate with Engineering and Product leadership to synchronize security goals with business aims and project timelines.

• Proactively create systems and processes that mitigate both immediate and long-term security risks.

• Oversee identity and access management, encompassing authentication, authorization, and secure machine-to-machine interactions.

• Design, implement, and sustain secure authentication systems for internal tools as well as customer-facing interfaces.

• Strengthen login systems and set consistent authentication standards across various services.

• Develop and maintain internal security tools to ensure secure development, operational transparency, and compliance procedures.

• Integrate SAST, DAST, SCA, container scanning, secret management, and secure build/deployment practices into CI/CD workflows.

• Detect vulnerabilities, communicate associated risks and impacts, and drive remediation efforts.

• Provide security insights during system design and architectural evaluations.

• Work collaboratively across teams to incorporate security into development processes.

• Simplify complex security concepts into actionable recommendations.

• Lead through influence via standards, tooling, mentorship, and secure engineering methodologies.

• Stay updated on best practices in application security, cloud security, and identity management.

• Apply OWASP, NIST, and CIS Controls pragmatically in live environments.

• Continuously enhance identity architecture and security automation.

• Advance Later’s security posture while ensuring the swift delivery of products.

⛳️ Requirements

• 5–7+ years of experience as a Security Engineer or Software Engineer with a strong emphasis on security.

• Demonstrated experience in building and managing production-grade software, systems, or internal tools.

• Solid foundation in application security, infrastructure security, and secure CI/CD methodologies.

• Practical experience with identity and access management, authentication systems, authorization frameworks, and secure machine-to-machine security patterns.

• Experience implementing OWASP, NIST, or CIS Controls in real-world production settings.

• Familiarity with AWS Security Hub, Azure Security Center, or GCP Security Command Center.

• Knowledge of SIEM/SOAR tools and Infrastructure-as-Code security scanning using Terraform or CloudFormation.

• Experience supporting SOC 2 and ISO 27001 compliance frameworks.

• Familiarity with contemporary backend systems, including C#, and cloud-native architectures.

• Ability to work collaboratively across functions and influence engineering teams effectively.

• Excellent communication skills with the capacity to translate complex security concepts into practical guidance.

🏝️ Benefits

• All permanent team members are eligible to participate in various benefits plans as part of their overall compensation package.

• Market-based, data-driven compensation reviewed bi-annually, including performance and market-related factors.

• Equal opportunity employer dedicated to fostering an inclusion-first culture.

• Recruitment accommodations or support available upon request.