Senior Identity Engineer (Workforce & Customer Identity)

One Identity

About The Position

One Identity is an award-winning security software provider offering a broad selection of solutions that solve some of the most common and most challenging IT security problems. Part of the One Identity Software group, One Identity solutions eliminate the complexities and time-consuming processes often required to govern identities, manage privileged accounts and control access. Our solutions enhance business agility while addressing IAM challenges within on-premises, cloud and hybrid environments. The combined entity delivers a complete portfolio of market-leading Identity Access Management, Privileged Access Management, and Identity Governance solutions. Now, customers can achieve identity-centric security with trusted, proven technology in each major category. We are seeking a Senior Identity Engineer (Workforce & Customer Identity) to lead the design, implementation, and operation of our identity ecosystem.This role owns end-to-end identity strategy and execution across corporate (workforce) and customer identity, including provisioning (SCIM), access governance, authentication, and lifecycle management. The ideal candidate is both strategic and hands-on, capable of building modern identity architecture in a cloud-first environment.

Requirements

7–10+ years of experience in IAM or security engineering
Strong hands-on experience with Entra ID (Azure AD), Okta, or similar
Deep expertise in SSO (SAML, OAuth, OIDC) and SCIM provisioning
Experience designing IAM solutions in cloud/SaaS environments
Strong understanding of access models (RBAC, ABAC, least privilege)
Scripting/automation experience (PowerShell, Python, APIs)

Nice To Haves

Experience with Identity Governance tools (e.g., SailPoint)
Experience with CIAM and customer-facing authentication systems
Familiarity with ISO 27001, SOC 2 frameworks
Experience in carve-outs, M&A, or greenfield environments
Relevant certifications (CISSP, Azure/Entra, Okta)

Responsibilities

Define and execute IAM strategy across workforce and customer identity
Design and manage identity platforms (e.g., Entra ID, Okta)
Implement SSO (SAML, OIDC), MFA, and conditional access policies
Define and manage birthright access models and RBAC/ABAC controls
Own identity lifecycle (joiner/mover/leaver) and SCIM-based provisionin
Build and manage CIAM solutions for customers, partners, and external users
Implement access governance (certifications, reviews, least privilege)
Automate identity workflows and integrate with enterprise systems (Workday, Salesforce, etc.)
Partner with security and audit teams on compliance (ISO 27001, SOC 2)
Lead identity separation and transformation during carve-out