Senior Identity Engineer

Senior Identity Engineer

We are seeking a highly skilled Senior Identity Engineer to lead the design, implementation, and ongoing engineering of the organization's identity and access management (IAM) capabilities. This role combines hands-on engineering with solution architecture, ensuring secure, scalable, and modern identity services across cloud and SaaS platforms.

Key Responsibilities

• Design, implement, and maintain enterprise IAM solutions across Microsoft 365, Microsoft Entra ID, Okta, AWS, Azure, and SaaS applications.
• Lead the design, engineering, and operational support of identity services, including authentication, authorization, federation, SSO, MFA, lifecycle management, and privileged access.
• Develop identity standards, reference architectures, and engineering best practices aligned with Zero Trust principles
• Design and implement secure identity integrations for cloud platforms, applications, APIs, and third-party services.
• Design and implement identity controls for AI platforms and services, including secure authentication, authorization, workload identities, API security, and access governance for enterprise AI solutions.
• Partner with security and engineering teams to implement identity controls for AI agents, copilots, machine identities, and service accounts while supporting Zero Trust principles and least-privilege access.
• Engineer and support identity governance capabilities, including Joiner-Mover-Leaver processes, access reviews, role-based access control (RBAC), and privileged identity management.
• Partner with infrastructure, cloud, application, and security teams to integrate identity into enterprise solutions and cloud architectures.
• Support identity-related security initiatives, incident response, and continuous improvement activities.
• Evaluate new IAM technologies and proof-of-concept and security benchmarking of identity technologies.

Required Experience

• 7+ years of experience designing and implementing enterprise IAM solutions.
• Strong hands-on experience with Microsoft Entra ID, Microsoft 365, Okta, AWS IAM, and Azure identity services.
• Experience implementing SAML, OAuth 2.0, OpenID Connect, SCIM, and modern authentication protocols.
• Strong understanding of Zero Trust, identity governance, privileged access management, and cloud security best practices.
• Experience securing modern identity architectures for cloud, SaaS, APIs, and AI-enabled applications, including OAuth, OpenID Connect, workload identities, and machine-to-machine authentication.
• Understanding identity security considerations for Generative AI and AI agents, including secure access to AI platforms, API authorization, secret management, and governance of AI service identities.
• Experience integrating SaaS applications with enterprise identity providers.
• Experience with Infrastructure as Code and Automation (PowerShell, Python, or similar) is preferred.
• Excellent communication and stakeholder engagement skills with the ability to translate business requirements into secure identity solutions.

Preferred Qualifications

• Relevant certifications such as Microsoft, Okta, AWS, Azure Identity & cloud security certifications.
• Experience with identity governance and administration (IGA) platforms.
• Experience supporting hybrid identity environments and large-scale cloud migrations.

At Taxwell, we believe our work benefits from the diverse perspectives of our employees. As such, Taxwell welcomes and celebrates diversity and inclusion and is committed to equal opportunity employment. At Taxwell, you can expect a supportive, open, and inclusive atmosphere and a team that values your contributions.

Taxwell is committed to providing an environment of mutual respect where equal employment opportunities are available to all applicants without regard to race, color, religion, sex, national origin, age, disability, marital status, sexual orientation, gender identity, veteran status, and any other status protected under applicable law. Taxwell considers information gathered in the hiring process, including information on this application, confidential, and only shares it on a need-to-know basis or as required by law.

If you need assistance or accommodation due to a disability, you may contact us at View email address on click.appcast.io or by calling View phone number on click.appcast.io to speak with a member of the HR Talent Acquisition team.