Senior Security Engineer, Platform and IAM Support

Senior Security Engineer, Platform And IAM Support

The senior identity and access management (IAM) and platform engineer plays a critical role in designing, implementing, and maintaining secure, scalable, and user-centric identity and access solutions across the organization's technology ecosystem. This role sits at the intersection of security, infrastructure, and developer experience, ensuring that access controls are robust while enabling engineering teams to move quickly and safely.

As a senior member of the engineering team, this role collaborates with the leads on overall strategy and architecture of IAM and platform services, helping to define best practices, drive automation, and help with the integration of identity systems across cloud and on-prem environments. The role also supports broader platform engineering efforts by contributing to tooling, infrastructure-as-code, CI/CD pipelines, and service orchestration.

Your impact

Identity and access management (IAM)

• Design and implementation of identity and access management solutions, including federated identity, SSO, RBAC, and lifecycle management.
• Collaborate on the integration of IAM with cloud platforms (e.g., AWS, Azure), SaaS applications, and internal services.
• Partner with security, DevOps, and application teams to enforce least privilege access, auditability, and compliance.
• Build and maintain platform tooling to manage secrets, certificates, authentication, and authorization flows.
• Automate IAM provisioning and de-provisioning using infrastructure-as-code and CI/CD pipelines.
• Participate in incident response and root cause analysis related to identity or platform infrastructure.

Platform security engineering

• Collaborate with lead engineers on operational support of security tools (Email Security, SASE, EDR, SIEM, etc.)
• Collaborate with lead engineers to integrate security best practices into CI/CD pipelines and cloud infrastructure (Azure, GCP).
• Assist in securing container platforms (e.g., Kubernetes, Docker) and infrastructure as code (Terraform, CloudFormation, etc.).
• Participate in threat modeling and security reviews of new infrastructure components.

Security operations & monitoring

• Stay current with industry trends and threat landscapes related to identity security and platform resilience.
• Collaborate with SOC and security analysts to investigate IAM-related incidents.
• Develop scripts and automation (e.g., Python, PowerShell) to enhance identity workflows and platform security.
• Monitor system logs, access events, and security alerts from IAM and cloud platforms.
• Maintain documentation for IAM processes, security controls, and supported systems.

Minimum salary: $99,400.00

Maximum salary: $134,715.00

VS&Co provides a range of compensation for this role as shown. Your actual salary will be determined by a number of factors, including: your specific skills and experience, geographic region, or other relevant factors.

Qualifications

• • 6+ years related cybersecurity experience
• • Experience with SailPoint ISE, CyberArk, PingIdentity, Directory Services, EntraAD
• • Understanding of networking applications and multiple platforms
• • Demonstrated knowledge of security controls in relation to authentication, authorization, privilege access management, identity governance
• • Customer service orientation
• • Understanding of security controls and how they are used to detect and respond
• • Ability to communicate technical issues to non-technical audiences across functions
• • Ability to assess/evaluate/prioritize risk
• • Ability to lead small (sometimes cross functional) teams/projects/programs
• • Demonstratable shell scripting abilities. Bash, python, Powershell, .Net, Java.

Required

• • Deep expertise in IAM technologies such as PingIdentity, Azure AD, GCP, or similar systems.
• • Strong understanding of authentication protocols (OAuth2, OIDC, SAML) and access control models (RBAC, ABAC, PBAC).
• • Proficiency in infrastructure-as-code (Terraform, Pulumi) and automation tooling.
• • Experience with CI/CD systems (e.g., GitHub Actions, GitLab CI, Jenkins) and secrets management tools (e.g., CyberArk, HashiCorp Vault, Azure Secrets Manager).
• • Solid background in cloud infrastructure (Azure, or GCP) and container orchestration (Kubernetes preferred).
• • Familiarity with regulatory and compliance requirements (e.g., SOX, PCI) and how they relate to IAM.
• • Experience prioritizing work and/or managing a queue

Education

• • Bachelor's degree in Information Technology/Information Security or equivalent experience