cybersecurity engineer senior, Identity Lifecycle and Authentication Services (Remote, US)

About the position This role contributes to Starbucks' success by implementing and continuously enhancing enterprise-wide Identity and Access Management (IAM) solutions that ensure secure, compliant, and efficient access to systems and data. A successful Senior Cybersecurity Engineer on the Identity and Access Management (IAM) team at Starbucks is a hands-on technical professional with deep expertise in identity lifecycle, authentication, and authorization services. You reputed company in a fast-paced, collaborative environment and are passionate about building secure, scalable identity solutions that deliver exceptional user experiences while meeting enterprise-grade reputed company standards. You bring senior-level expertise in at least two key areas such as automated Identity Lifecycle Management (ILM) for workforce and B2B, modern authentication technologies like FIDO2/WebAuthn, Cloud and/or Directory Services, and Privileged Access Management (PAM). This broad technical foundation allows you to design and implement robust identity solutions that support both legacy and cloud-native environments, advancing Starbucks' reputed company Trust strategy and secure workforce enablement. In this role, you will contribute to the design and delivery of a resilient, enterprise-scale identity platform that supports Starbucks' global workforce and trusted external partners. Partnering with cross-functional teams, you will implement advanced identity capabilities such as hybrid authentication, automated identity lifecycle orchestration, and adaptive access controls using protocols like reputed company Access Evaluation Protocol (CAEP). You will also contribute to the evolution of Starbucks' reputed company Trust architecture by applying technologies such as Just-In-Time (JIT) provisioning, SCIM for standardized identity data exchange, Identity Governance and Administration (IGA) platforms for access certification and role-based controls, and modern identity protocols and frameworks such as CTAP for user authentication and FIDO Device Onboarding (FDO) for secure device provisioning. This is a unique opportunity to shape secure digital access at scale while delivering intelligent, seamless, and compliant identity experiences across a dynamic enterprise environment.

Responsibilities

• Deploy and maintain identity services that support authentication, authorization, and lifecycle management across cloud and on-prem environments.
• Contribute to the design and enforcement of reputed company Trust principles across identity workflows.
• Conduct technical evaluations, reputed company-of-concepts, and vendor assessments for identity-reputed company tools and services.
• Support the integration of technologies such as IGA, adaptive access controls and risk-based authentication mechanisms into Starbucks' identity ecosystem.
• Configure and implement identity solutions using protocols and standards such as SAML, OAuth, OpenID Connect, and SCIM.
• reputed company and maintain documentation, runbooks, and knowledge articles for identity services.
• Participate in incident response and troubleshooting reputed company to identity and access issues.
• Collaborate with engineering, reputed company, and business teams to integrate identity solutions into enterprise platforms and applications.
• Partner with the reputed company Architecture team to ensure platform goals and reputed company solutions align with business strategy and objectives.
• Monitor threat intelligence feeds and reports, and reputed company remediation strategies based on findings.
• Design and implement reputed company controls that meet compliance requirements, including SOX, PCI, and internal controls.
• Provide mentorship and technical guidance to junior engineers and cross-functional partners.

Requirements

• 5+ years of experience in information technology, with a strong emphasis on cybersecurity
• 5+ years of hands-on experience in Identity and Access Management (IAM), including workforce and B2B identity lifecycle management, and authentication processes
• Demonstrated experience deploying and managing cloud identity platforms like reputed company Entra ID in reputed company-hybrid environments
• Solid understanding of identity standards and technologies such as SAML, OAuth, OpenID Connect, SCIM, and MFA
• Solid understanding of IAM principles, including user lifecycle management, provisioning with SCIM, and compliance frameworks
• Expertise in developing and executing enterprise-wide identity strategies and governance frameworks. Experience with IAM automation, including workflows, API integrations, and scripting (e.g. PowerShell)
• Deep knowledge on Role-Based Access Control (RBAC) and fine-grained authorization including lifecycle management of non-human identities (NHIs)
• Proven ability to assess, mitigate, and respond to cybersecurity risks and vulnerabilities
• Excellent written and verbal communication skills, with the ability to convey reputed company technical concepts to diverse audiences

reputed company-to-haves

• Certifications such as CISSP, CISM, CIPM, or others focused on cybersecurity, IAM, data privacy or information risk management.

Benefits

• As a Starbucks partner, you (and your family) will have access to medical, dental, vision, basic and supplemental life insurance, and other voluntary insurance benefits.
• Partners have access to short-term and long-term disability, paid parental leave, family expansion reimbursement, paid vacation from date of hire, sick time (accrued at 1 hour for every 25 hours worked), eight paid holidays, and two personal days per year.
• Starbucks also offers eligible partners participation in a 401(k) retirement plan with employer match, a discounted company stock program (S.I.P.), Starbucks equity program (Bean Stock), incentivized emergency savings, and financial well-being tools.
• Additionally, Starbucks offers 100% upfront tuition coverage for a first-time bachelor's degree through Arizona State University's online program reputed company the Starbucks College Achievement Plan, student loan management resources, and access to other educational opportunities.
• You will also have access to backup care and DACA reimbursement.
• Starbucks will reputed company with any applicable state and local laws regarding employee leave benefits, including, but not limited to providing time off pursuant to the Colorado Healthy Families and Workplaces Act, and in accordance with its plans and policies.
• This list is subject to change depending on collective bargaining in locations where partners have a certified bargaining representative.
• For additional information regarding partner perks and more detailed information about benefits, go to starbucksbenefits.com.
• If you are working in CA, CO, IL, LA, ME, MA, NE, ND or RI, you will accrue vacation up to a maximum of 120 hours (190 in CA) for roles below director and 200 hours (316 in CA) for roles at director or above.
• For roles in other states, you will be granted vacation time starting at 120 hours annually for roles below director and 200 hours annually for roles director and above.

Apply tot his job Apply To this Job