Distinguished Software Engineer - Identity
About The Position
As a Distinguished Engineer at Capital One, you will be a part of a community of technical experts working to define the future of banking in the cloud. The Mission: We are moving beyond the era of static, administrative-time access to a future defined by Adaptive, Policy-Based Orchestration. We aren't just migrating our core infrastructure from on-premise to the Cloud; we are fundamentally re-architecting how identity serves as the perimeter in a highly regulated environment. Our goal is to abstract the complexity of legacy Identity Governance and Administration (IGA) and replace standing privileges with a Just-In-Time (JIT) ecosystem. We are looking for a visionary architect to build an intelligent, self-sufficient platform that evaluates real-time context—integrating endpoint risk, network signals, and behavioral heuristics—to grant the right access, to the right resources, at the exact moment it's needed.
Requirements
- Bachelor's Degree
- At least 7 years of experience in Software engineering and solution architecture
- At least 7 years of experience in Enterprise architecture and design patterns
Nice To Haves
- Bachelor's or Master's Degree in Computer Science or a related field
- 10+ years of professional experience coding in commonly used languages (Java, Python, Go, JavaScript/TypeScript, Swift)
- 8+ years of professional experience in the full lifecycle of system development, from conception through architecture, implementation, testing, deployment and production support
- 3+ years of experience with public or private cloud technologies
- 1+ years of experience with IAM
- 3+ years of experience modernizing legacy systems
- 1+ years of experience with AI coding tools
- Recognized leader in the Identity space
- Experience decoupling legacy monoliths
- Implementing Open Policy Agent (OPA) or similar policy engines
- Building resilient, high-scale distributed systems
- Treat Identity as the core engine of a modern Zero Trust architecture
Responsibilities
- Architect the transition away from "permanent access" to a model of zero standing privileges. You will design the systems that enable seamless, automated access elevation and revocation based on real-time necessity.
- Lead the effort to abstract IGA components, moving us toward a centralized, policy-based access model that is agnostic of the underlying stack and highly automated.
- Design an authorization fabric that factors in multi-dimensional telemetry—including device posture, network risk, and user behavior—to make dynamic, risk-based access decisions.
- Champion an "Identity-as-a-Service" internal culture, building developer-centric APIs and self-service capabilities that allow our product teams to move fast without compromising our rigorous regulatory guardrails.
- Navigate the complexity of a highly regulated financial environment, ensuring that our leap into the future of IAM meets and exceeds the most stringent compliance and audit standards.
- Articulate and evangelize a bold technical vision for your domain
- Decompose complex problems into practical and operational solutions
- Ensure the quality of technical design and implementation
- Serve as an authoritative expert on non-functional system characteristics, such as performance, scalability and operability
- Continue learning and injecting advanced technical knowledge into our community
- Handle several projects simultaneously, balancing your time to maximize impact
- Act as a role model and mentor within the tech community, helping to coach and strengthen the technical expertise and know-how of our engineering and product community
Benefits
- performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI)
- comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
