Sr Product Security Engineer

As a Senior Security Engineer specializing in Identity Architecture & Solutions, you will craft, build, and operationalize scalable identity and SaaS security capabilities across the enterprise. This role is a technical leader within the Enterprise Security organization, and they should be passionate about Identity & SaaS Security functions and identity architecture strategy. As an organization, we collaborate on driving measurable reductions of identity‑centric risk. This role is critical to delivering on that vision. Challenge Engineer Zero‑Trust access controls across workforce and service identities: implement pipelines using RBAC+ABAC standards, device and posture checks, and risk‑adaptive policies for critical services and high‑risk scenarios. Harden privileged access: migrate administrators to right‑size entitlements and eliminate long‑lived elevated access across prioritized platforms (e.g., Entra ID, Privileged Access Management). Stand up SaaS security posture monitoring: participate in tool POCs and deployments; define baselines for M365/Slack/GitHub/Workday/Google; build remediation runbooks and posture success measurements. Instrument identity metrics collection and tracking: standardize log schemas for authentication (AuthN)/authorization (AuthZ) and entitlement changes; publish dashboards for privilege drift, misconfigurations, and access sprawl; coordinate risky events to security alert procedures. Contribute and drive architecture & standards: author implementation guides and reference architecture that supports a multi‑year strategy passionate about measuring risk reduction over time. Inclusive of new technologies and risks. What is needed to succeed Depth of experience with enterprise identity controls and solutions, including delivering outcomes that use Entra ID/AD, Okta, and SailPoint (or equivalents) Strong understanding of core Zero Trust principles, the least privilege and continuous verification models, and Identity governance and administration (IGA) SaaS posture skills for securing large SaaS tenants (M365, Slack, GitHub, Workday, Google), including security Authn and Authz for all identities accessing SaaS tenants Influence & collaboration with key partners in IT and other security teams and organizations Excellent written and verbal communication skills, including communicating complex problems and solutions to business leaders and technical specialists Preferred Engineering experience with secure access control solutions (e.g. Teleport, Vault), secrets management, and CI/CD solutions and their customers. Scripting/automation knowledge (e.g., Python, PowerShell) and infrastructure‑as‑code (e.g., Terraform) for policy and pipeline automation. Exposure to service identity frameworks (e.g., SPIFFE/SPIRE) and workload identity patterns. Experience/Education requirements ~10+ years relevant experience; Bachelor’s required, Masters preferred or equivalent experience. Technical lead experience in enterprise environments Expected Pay Range Our compensation reflects the cost of labor across several U.S. geographic markets, and we pay differently based on those defined markets. The U.S. pay range for this position is $168,200 – $310,100 annually. Pay within this range varies by work location and may also depend on job‑related knowledge, skills, and experience. Your recruiter can share more about the specific salary range for the job location during the hiring process. In California, the pay range for this position is $214,100 – $310,100. In Washington, the pay range for this position is $194,000 – $281,000. In addition, certain roles may be eligible for long‑term incentives in the form of a new hire equity award. Equal Employment Opportunity Adobe is proud to be an Equal Employment Opportunity employer. We do not discriminate based on gender, race or color, ethnicity or national origin, age, disability, religion, sexual orientation, gender identity or expression, veteran status, or any other protected characteristic. Learn more. State‑Specific Notices California: Adobe will consider qualified applicants with arrest or conviction records for employment in accordance with state and local laws and “fair chance” ordinances. Maine: Unlawful to require or administer a lie detector test as a condition of employment or continued employment in Massachusetts. #J-18808-Ljbffr