Senior Security Engineer, Identity & Access Management
New
V
Valon TechFintech Mortgage Servicing
Valon offices are located in New York City and San Francisco, but we fully support remote work!Full-TimeSenior
Salary$180K - $230K
Apply NowOpens the employer's application page
Job Details
- Experience
- 5+ years
- Required Skills
- LDAPGoogle Workspace
Requirements
- 5+ years of experience in security engineering roles with a core focus on IAM
- Bachelor's degree in Information Security, Computer Science, or related field
- Deep expertise in identity protocols: SAML 2.0, OIDC/OAuth 2.0, SCIM, and LDAP
- Proven experience administering and scaling IdP platforms (e.g., Okta, Azure AD / Entra ID, Google Workspace)
- Strong background in cloud IAM (GCP preferred) including workload identity federation
- Expertise in building PAM solutions and enforcing least-privilege for human and non-human identities
- Experience building AI/LLM-powered workflows for security or operations
- Applied knowledge of security and compliance frameworks (OWASP, NIST, CIS, SOC 2, ISO 27001)
- Strong communication skills for explaining complex concepts to technical and non-technical stakeholders
- Relevant security certifications such as CISSP, CISM, CCSK, or CCSP
Responsibilities
- Design and support end-to-end lifecycle of workforce identity systems including identity automation, access management, and least-privilege enforcement
- Support design of secure identity design patterns for product teams building on ValonOS
- Manage and evolve enterprise IdP platforms including SSO integrations, MFA, conditional access, and directory synchronization
- Define and enforce RBAC and group-based access policies for internal applications and cloud environments
- Support privileged access management (PAM) for internal infrastructure
- Design and build AI-assisted workflows that automate and accelerate IAM operations
- Evaluate AI risks across IAM pipelines, including data exposure and prompt injection threats
- Collaborate with cross-functional teams to drive mitigation for data security risks
- Support vulnerability management, regulatory compliance (SOC 2, CCPA, NYDFS, FTC), and incident response
View Full Description & ApplyYou'll be redirected to the employer's site
