Senior Security Engineer – Identity and Access Management

This is a fully remote position, open to applicants in California, +2 more states.

📋 Description

• Design, implement, and maintain secure and scalable Identity and Access Management (IAM) solutions across both hybrid on-premises and cloud environments.

• Lead the transition towards Zero Trust and cloud-based identity frameworks.

• Develop automated identity processes and workflows.

• Enhance access governance and controls for privileged access.

• Incorporate AI-driven features to bolster security and operational efficiency.

• Collaborate with cross-functional teams in infrastructure, applications, and security to identify and mitigate identity-related risks.

• Deploy monitoring and automated responses to identity threats.

• Investigate, assess, design, and recommend enterprise-level technical security solutions.

• Support technological evaluations and foster innovation.

• Ensure adherence to regulatory standards and assist in audit preparedness.

• Establish identity security standards and best practices.

• Provide technical security assessment assistance and uphold effective information security programs.

• Participate in rotational on-call shifts to ensure availability, troubleshoot critical issues, and maintain IT operational continuity.

• Work scheduled weekends and holidays as necessary.

⛳️ Requirements

• Bachelor's degree in Computer Engineering, Computer Science, Mathematics, or a related field.

• Minimum of 5 years of relevant experience; 5–8 years is preferred.

• Proven experience collaborating on security solution designs for TCP/IP, LAN/WAN, switching, routing, VoIP and telephony, firewalls and VPN, intrusion prevention systems, vulnerability assessment, and patch management tools.

• Hands-on experience designing security controls and countermeasures for operating systems, databases, applications, web services, user devices, and wireless networks.

• Ability to work a rotational on-call schedule.

• Availability to work weekends and holidays as required.

• Over 6 years of Identity and Access Management experience is preferred.

• Experience managing an enterprise environment with more than 10,000 accounts is preferred.

• Familiarity with a healthcare environment is preferred.

• CISSP, CIAM, identity, or security-related certification upon hire is preferred.

• Knowledge of HIPAA, NIST, and ISO frameworks is preferred.

• Experience with hybrid Active Directory and cloud environments, including Microsoft Entra ID/Azure AD, is preferred.

• Understanding of Zero Trust, least privilege access, and identity governance is preferred.

• Familiarity with SAML, OAuth, OIDC, Kerberos, and LDAP is preferred.

• Proficiency in PowerShell, Python, and Microsoft Graph API is preferred.

• Experience with Azure Logic Apps, Power Automate, or similar orchestration tools is preferred.

• Familiarity with AI-assisted tools such as GitHub Copilot, Microsoft Security Copilot, or Claude Code is preferred.

• Ability to assess technologies and convert business needs into secure technical solutions.

• Strong communication skills for engaging with both technical and non-technical stakeholders.

🏝️ Benefits

• Retirement 401(k) Savings Plan with employer matching.

• Comprehensive health care benefits: medical, dental, and vision.

• Life insurance coverage.

• Disability insurance.

• Paid parental leave.

• Vacation time.

• Paid holidays.

• Health-related paid time off.

• Optional voluntary benefits.

• Well-being resources.

• Potential for additional compensation, including shift differentials, standby/on-call pay, overtime, premiums, extra shift incentives, or bonus opportunities.