Principal Digital Identity Engineer

Description

• Contribute to training program development for identity management practices
• Provide technical guidance on identity-related security controls and compliance requirements
• Stay current with emerging trends in digital identity, including decentralized identity, biometrics, and zero-trust architectures
• Ensure compliance with regulatory requirements and industry standards for identity management and data protection
• Establish standards for identity federation, directory services, and authentication protocols (SAML, OAuth, OpenID Connect, LDAP)
• Lead complex engineering projects involving identity integration across multiple systems and platforms
• Represent the organization in client meetings and industry forums on identity management topics
• Collaborate with cybersecurity, software engineering, and IT teams to ensure cohesive identity management strategies
• Serve as technical reviewer and approver for identity-related designs and implementations
• Implement security best practices for identity verification, authentication, and authorization
• Develop policies and procedures for identity governance and administration
• Develop and maintain identity lifecycle management processes from provisioning to de-provisioning
• Evaluate and recommend new identity technologies and vendor solutions
• Design and architect enterprise-wide digital identity management solutions, including identity governance, access management, and authentication systems
• Conduct security assessments and risk analysis for identity systems
• Lead the implementation of identity and access management (IAM) platforms, single sign-on (SSO), multi-factor authentication (MFA), and privileged access management (PAM) solutions
• Maintain cybersecurity awareness and integrate security principles into all identity solutions
• Drive automation of identity processes to improve efficiency and reduce manual overhead
• Champion adoption of modern identity management technologies and best practices
• Provide expert technical guidance and mentorship to junior engineers and cross-functional teams

Requirements

• Bachelor's degree in Computer Science, Information Security, Engineering, or related field (Master's preferred)
• Experience with DevSecOps practices and CI/CD pipelines
• Relevant certifications such as CISSP, CISM, CISA, or vendor-specific IAM certifications
• Strategic thinking with focus on long-term architectural planning
• Proficiency in directory services (Active Directory, Azure AD, LDAP)
• Knowledge of cloud identity services (AWS IAM, Azure AD, GCP Identity)
• Strong leadership and mentoring capabilities
• 5+ years in a senior or lead engineering role with demonstrated technical leadership
• Experience with privileged access management (PAM) and identity governance solutions
• Knowledge of emerging identity technologies (decentralized identity, blockchain-based identity, biometrics)
• Excellent communication skills with ability to explain complex technical concepts to non-technical stakeholders
• 12+ years of experience in identity and access management, information security, or related fields
• Strong understanding of cryptography, PKI, and certificate management
• Proven ability to manage multiple complex projects simultaneously
• Strong understanding of security frameworks (NIST, ISO 27001, CIS Controls)
• Knowledge of compliance requirements (GDPR, HIPAA, SOC 2, etc.)
• Deep understanding of authentication protocols and standards (SAML, OAuth 2.0, OpenID Connect, LDAP, Kerberos)
• Problem-solving mindset with attention to detail
• Experience in highly regulated industries (nuclear, healthcare, finance, government)
• Experience with scripting and automation (Python, PowerShell, or similar)
• Experience with zero-trust security models and implementation
• May require occasional travel for client meetings or industry conferences
• Familiarity with identity APIs and integration patterns
• Expert knowledge of IAM platforms (e.g., Okta, Azure AD, Ping Identity, ForgeRock, SailPoint)
• Understanding of data privacy principles and personally identifiable information (PII) protection

Benefits

• 401k with company match
• Generous vacation policy, plus holidays
• Competitive compensation packages
• Collaborative team environment with cross-functional interaction
• Medical, dental, vision plans
• Hybrid or remote work options may be available depending on organizational needs

Training + Development

Interview process

Visa Sponsorship

Security clearance