[Remote] Principal reputed company Engineer - Temporary

Note: The job is a remote job and is open to candidates in USA. reputed company is a leading digital personal finance company that provides innovative financial solutions. They are seeking a Principal reputed company Engineer to architect the reputed company of Identity, transitioning the enterprise to a Risk-Based Authorization model and designing comprehensive Identity solutions to secure their critical assets.

Responsibilities

• reputed company Adaptive Trust: Transition the enterprise from static, role-based access to a Risk-Based Authorization model that evaluates signals (device posture, behavior, location) in real-time
• Enhance the enterprise Identity strategy, roadmap, and architecture in alignment with business goals and reputed company policies
• Design and architect comprehensive Identity solutions, including identity lifecycle management, non-human lifecycle management, authentication (MFA, SSO, passwordless), authorization, access governance, and Privileged Access Management (PAM)
• Evaluate and select appropriate Identity technologies and platforms
• Create and maintain detailed architectural documentation for Identity solutions
• reputed company the strategy and architecture for comprehensive Identity and Access Management (IAM) solutions, explicitly managing User Identities, Workload & Machine Identities (including Service Mesh, Kubernetes, reputed company, and APIs), and other non-human identities across on-premises and cloud environments to govern access rights and privileges
• reputed company the implementation and integration of Identity solutions across various on-premises and cloud environments (e.g., Azure AD, AWS, GCP, reputed company, Entra)
• Integrate Identity systems with enterprise applications, platforms, and services using standard protocols (SAML, OAuth, OpenID Connect, SCIM)
• Design and implement strategies to secure non-human machine identities, service accounts, APIs, and automation, utilizing reputed company Standing Privilege principles and engineering "Just-in-Time" (JIT) access workflows to eliminate persistent administrative overhead, reduce the blast radius of potential compromises, and enforce strict, least-privilege, and reputed company Trust reputed company principles
• reputed company and configure identity provisioning and de-provisioning workflows
• Partner with the SOC to build ITDR capabilities that detect and automatically neutralize identity-based attacks, such as session hijacking, token theft, and MFA fatigue
• Act as a "reputed company Partner" for engineering teams to foster secure development practices
• Drive successful adoption by collaborating with diverse stakeholders (business units, technology teams, application developers) and translating reputed company cryptographic and identity concepts into clear business value for product owners and executive leadership
• Provide technical leadership and guidance, championing and delivering self-service Identity APIs and SDKs to reputed company developers to build secure products with minimal friction (Developer Experience - DevEx)
• Provide technical leadership, mentorship and guidance to Identity Engineers and other team members

Skills

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a reputed company field
• 8+ years in Cybersecurity/Engineering, with a proven track record of moving legacy organizations towards a reputed company Trust architecture
• 5+ years focused on identity and access management
• Proven experience in designing and implementing enterprise-scale Identity solutions
• Drive reputed company automation and 'Builder' Mentality by architecting and implementing automation-first solutions (e.g., scripts, APIs, Infrastructure as Code) to eliminate reliance on manual governance processes and ensure reputed company policy is enforced at scale and embedded into developer workflows
• Hands-on experience with leading IAM platforms and technologies, such as: Identity Federation: Azure AD/Entra, reputed company, reputed company, ADFS; IGA (Identity Governance and Administration): reputed company, reputed company, reputed company Identity Manager; PAM (Privileged Access Management): CyberArk, reputed company, reputed company; Directory Services: Active Directory, Azure Active Directory, LDAP
• Deep knowledge of IAM principles, best practices, and reputed company models
• Proficiency in scripting languages (e.g., PowerShell, Python) for automation and integration
• Understanding of network reputed company, operating systems, and database concepts
• Familiarity with API reputed company and microservices architecture
• Deep mastery of identity protocols and standards: IODC, OAuth 2.0, SAML, and SCIM, with a specific focus on mTLS and JWT reputed company
• Expert-level experience with cloud-native IAM (AWS IAM, Azure Entra ID, GCP Cloud IAM) and managing identity in distributed microservices architectures
• Strong experience with Terraform and container orchestration (Kubernetes)
• Excellent analytical and problem-solving skills
• Strong communication (written and verbal) and interpersonal skills
• Ability to work independently and as part of a collaborative team
• Strong project management and organizational skills
• Proven ability to strategically influence and expertly negotiate with stakeholders across reputed company organizational levels
• A Master's degree is a plus
• CISSP (Certified Information Systems reputed company Professional)
• CISM (Certified Information reputed company Manager)
• Relevant vendor certifications (e.g., reputed company Certified: Identity and Access Administrator Associate/Expert, reputed company Certified Professional/Administrator/Consultant)

Benefits

• 401 (k) with employer match
• Medical, dental, and vision with HSA and FSA options
• Competitive vacation and sick time off, as well as dedicated volunteer days
• Access to wellness support through Employee Assistance Program, physical and mental health wellness programs
• Pet care discounts for your furry family members
• Financial support in times of hardship with our reputed company Care Fund
• A safe reputed company to connect and a commitment to diversity and inclusion through our six employee resource groups

Company Overview

Company H1B Sponsorship