Senior Identity Engineer

TAXWELL•Haverford, PA

About The Position

We are seeking a highly skilled Senior Identity Engineer to lead the design, implementation, and ongoing engineering of the organization's identity and access management (IAM) capabilities. This role combines hands-on engineering with solution architecture, ensuring secure, scalable, and modern identity services across cloud and SaaS platforms.

Requirements

7+ years of experience designing and implementing enterprise IAM solutions.
Strong hands-on experience with Microsoft Entra ID, Microsoft 365, Okta, AWS IAM, and Azure identity services.
Experience implementing SAML, OAuth 2.0, OpenID Connect, SCIM, and modern authentication protocols.
Strong understanding of Zero Trust, identity governance, privileged access management, and cloud security best practices.
Experience securing modern identity architectures for cloud, SaaS, APIs, and AI-enabled applications, including OAuth, OpenID Connect, workload identities, and machine-to-machine authentication.
Understanding identity security considerations for Generative AI and AI agents, including secure access to AI platforms, API authorization, secret management, and governance of AI service identities.
Experience integrating SaaS applications with enterprise identity providers.
Excellent communication and stakeholder engagement skills with the ability to translate business requirements into secure identity solutions.

Nice To Haves

Experience with Infrastructure as Code and Automation (PowerShell, Python, or similar) is preferred.
Relevant certifications such as Microsoft, Okta, AWS, Azure Identity & cloud security certifications.
Experience with identity governance and administration (IGA) platforms.
Experience supporting hybrid identity environments and large-scale cloud migrations.

Responsibilities

Design, implement, and maintain enterprise IAM solutions across Microsoft 365, Microsoft Entra ID, Okta, AWS, Azure, and SaaS applications.
Lead the design, engineering, and operational support of identity services, including authentication, authorization, federation, SSO, MFA, lifecycle management, and privileged access.
Develop identity standards, reference architectures, and engineering best practices aligned with Zero Trust principles
Design and implement secure identity integrations for cloud platforms, applications, APIs, and third-party services.
Design and implement identity controls for AI platforms and services, including secure authentication, authorization, workload identities, API security, and access governance for enterprise AI solutions.
Partner with security and engineering teams to implement identity controls for AI agents, copilots, machine identities, and service accounts while supporting Zero Trust principles and least-privilege access.
Engineer and support identity governance capabilities, including Joiner-Mover-Leaver processes, access reviews, role-based access control (RBAC), and privileged identity management.
Partner with infrastructure, cloud, application, and security teams to integrate identity into enterprise solutions and cloud architectures.
Support identity-related security initiatives, incident response, and continuous improvement activities.
Evaluate new IAM technologies and proof-of-concept and security benchmarking of identity technologies.