Senior Security Engineer, Identity & Access Management
About The Position
Valon is seeking a Senior Security Engineer, Identity & Access Management, to own the design, implementation, and operation of IAM systems for the enterprise identity stack powering its workforce, while supporting security for customer-facing authentication and authorization capabilities in ValonOS. The role connects IT, Engineering, and Security to ensure human and machine identities are governed consistently and securely. The Security team safeguards sensitive customer financial information and the infrastructure and data used to process mortgage loans. It also partners with Product and Engineering to build secure ValonOS capabilities, secures AI-powered systems and pipelines, uses AI tools to improve security operations, and works with external auditors, penetration-testing firms, and partners. Valon supports remote work, with offices in New York City and San Francisco.
Requirements
- At least 5 years of security engineering experience with a core focus on identity and access management.
- Bachelor's degree in Information Security, Computer Science, Technology, or a related field.
- Hands-on experience with an enterprise identity provider such as Okta, Entra ID, or Google Workspace, including SSO, MFA, and SCIM.
- Deep understanding of authentication and authorization models across applications, including SAML, OIDC/OAuth 2.0, RBAC, ABAC, and API access controls.
- Hands-on experience with modern identity security technologies and tooling.
- Deep expertise in modern identity protocols and standards, including SAML 2.0, OIDC/OAuth 2.0, SCIM, and LDAP.
- Experience administering and scaling identity provider platforms, including SSO, MFA, conditional access, and directory synchronization.
- Background in cloud IAM, preferably GCP, including service accounts, workload identity federation, and policy-as-code approaches.
- Expertise in building privileged access management solutions or identity vaults and enforcing least privilege across human and non-human identities.
- Experience building AI/LLM-powered workflows, ideally in a security or operations context, and a practical understanding of the identity and access risks they introduce.
- Familiarity with securing non-human and agentic identities, including AI service accounts, API key governance, and audit logging for automated systems.
- Applied knowledge of security and compliance frameworks, including OWASP, NIST, CIS, and SOC 2/ISO 27001 concepts.
- Excellent communication and collaboration skills, including the ability to explain complex security concepts to technical and non-technical stakeholders.
- Relevant security certification, such as CISSP, CISM, CCSK, CCSP, or similar.
Nice To Haves
- Experience working in high-growth or startup environments.
Responsibilities
- Design and support the end-to-end lifecycle of workforce identity systems, including identity automation, access management, and least-privilege enforcement across internal systems.
- Support secure identity design patterns for product teams building on ValonOS.
- Manage and evolve Valon's identity provider with IT, including SSO integrations, MFA policies, conditional access rules, and directory synchronization.
- Define and enforce RBAC and group-based access policies for internal applications, cloud environments, and development tooling.
- Support privileged access management for internal infrastructure in conjunction with Engineering teams.
- Design and build AI-assisted workflows that automate and accelerate core IAM operations.
- Evaluate AI risks across IAM pipelines and ensure appropriate controls for data exposure, prompt injection, and other threats.
- Collaborate with Product, Engineering, Data, Compliance, Legal, and other teams to identify and mitigate data security risks.
- Support operational and on-call duties, including vulnerability management, regulatory compliance, policy development, incident response, and security reviews.
Benefits
- Competitive salary and equity in the company.
- 401(k) plan.
- Comprehensive medical, dental, and vision benefits.
- Daily lunch and dinner through Forkable for in-office team members.
- Pre-tax commuter benefits for public transit, rideshares, and parking.
- Company-wide onboarding orientation and learning and development opportunities.
- Regular review cycles featuring 360-degree feedback.
- Quarterly budgets for team and company outings.
- Flexible paid time off with no annual limit, sick days, and 11 company holidays.
- 12 weeks of fully paid baby bonding leave for birthing and non-birthing parents.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
