Sr Identity Engineer II

ForeFlight Austin | 1801 E 6th St | Suite 400 | Austin, TX 78702, USA Jeppesen ForeFlight builds industry‑leading aviation software used by pilots, aircraft operators, and major airlines worldwide. As a high‑growth, private equity‑backed company, we are focused on scaling our operations, strengthening our financial infrastructure, and driving operational excellence across the business. Our team combines deep domain expertise with a collaborative, high‑performance culture to solve complex challenges and support continued growth. This is a hybrid role in Denver, CO or Austin, TX. We are seeking a Senior Identity Specialist Engineer to design, build, and operate the identity and access management (IAM) infrastructure that secures our people, applications, and data. You will own the technical strategy for authentication, authorization, and identity lifecycle across the enterprise, partnering closely with security, infrastructure, and product teams. Key Responsibilities Architect and implement IAM solutions across workforce and customer identity (SSO, MFA, federation, SCIM, RBAC/ABAC). Own and evolve our identity platforms (e.g., Okta, Azure AD/Entra ID, Ping, or similar), including integrations via SAML, OAuth 2.0, and OIDC. Design and automate identity lifecycle workflows: provisioning, deprovisioning, access reviews, and least‑privilege enforcement. Lead privileged access management (PAM) and secrets management initiatives. Define standards, policies, and best practices for authentication and authorization; review designs for security and compliance. Partner with security teams on threat modeling, incident response, and audit/compliance efforts (SOC 2, ISO 27001, etc.). Mentor engineers and serve as the subject‑matter expert on identity across the organization. Required Qualifications 6+ years in engineering, with 4+ years focused on IAM or identity‑related security. Deep expertise with SAML, OAuth 2.0, OIDC, SCIM, and federation protocols. Hands‑on experience with at multiple major IdP (Okta, Entra ID, Ping, ForgeRock, AD). Strong scripting/automation skills (Python, Go, PowerShell, or similar) and IaC (Terraform). Solid understanding of cloud IAM (AWS, Azure, or GCP) and zero‑trust principles. This is a hybrid role in Denver, CO or Austin, TX. Preferred Qualifications Experience with PAM and secrets management tooling (CyberArk, HashiCorp Vault). Familiarity with compliance frameworks (SOC 2, ISO 27001, FedRAMP). Relevant certifications (Okta Certified, CISSP, AWS/Azure security). Why Join Us At Jeppesen ForeFlight, we know you want a rewarding career. To do that, you need challenging projects, a good work environment, and awesome coworkers. We believe in our employees, and we empower them to make a direct impact on our products and services. We strive to provide our employees with a world‑class benefits experience, focused on supporting their physical, financial, and emotional wellbeing. Our benefits package includes but is not limited to the following: Medical, dental, vision insurance with employer paid health premiums. Open PTO Policy. 401(k) with up to 10% company matching and immediate vesting. 12 Weeks Paid Maternity Leave. 4 Weeks Paid Paternity Leave. Flight Training Rewards. Pay is based upon candidate experience and qualifications, as well market and business considerations: Summary Pay Range: $102,000‑$125,000. Jeppesen ForeFlight – EOE including Disability/Vets | Pay Transparency | E‑Verify Participant | Equal Opportunity Employer. Equal Opportunity Employer. This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor. #J-18808-Ljbffr ForeFlight