Staff Information Security Engineer- Eng

Design, build, and maintain secure, scalable, and highly available IAM platform infrastructure. Lead DevSecOps initiatives by implementing CI/CD pipelines, Infrastructure as Code (IaC), and automated deployment strategies. Develop automation for IAM platform provisioning, configuration management, monitoring, patching, and operational workflows. Partner with IAM engineering teams to automate deployment and lifecycle management of identity platforms and security services. Design and implement cloud-native architectures supporting high availability, resiliency, and disaster recovery. Build reusable automation frameworks using scripting languages and infrastructure automation tools. Integrate security controls, secrets management, certificate management, and policy enforcement into CI/CD pipelines. Establish platform observability through logging, monitoring, alerting, and performance optimization. Lead root cause analysis for complex production issues and implement long-term reliability improvements. Drive engineering standards, platform modernization, and operational excellence across IAM services. Mentor engineers, conduct design and code reviews, and promote DevSecOps best practices throughout the organization. Collaborate with cross-functional teams to ensure security, compliance, and operational requirements are incorporated into engineering solutions. Bachelor's degree in computer science, Information Technology, Cybersecurity, or a related field. 8+ years of experience in DevOps, Platform Engineering, Site Reliability Engineering (SRE), Cloud Engineering, or Security Engineering. Strong experience designing and supporting enterprise CI/CD platforms using tools such as GitHub Actions, Jenkins, Azure DevOps, or GitLab CI. Hands-on experience with Infrastructure as Code using Terraform, Ansible, or similar automation frameworks. Experience with container technologies including Docker and Kubernetes/OpenShift. Strong expertise in Linux administration and scripting using Python, Bash, or PowerShell. Experience with public cloud platforms, preferably AWS, Azure, or Google Cloud Platform. Experience implementing monitoring and observability solutions such as Prometheus, Grafana, Splunk, Datadog, or ELK. Working knowledge of identity and access management concepts, including authentication, authorization, RBAC, SSO, and federation. Experience integrating secrets management and certificate management solutions such as HashiCorp Vault, Google Secret Manager, DigiCert, or similar technologies. Strong understanding of DevSecOps principles, secure software delivery, and cloud security best practices. Experience supporting enterprise IAM platforms such as Saviynt, SailPoint, Ping Identity, Okta, Microsoft Entra ID, or CyberArk. Experience implementing Zero Trust architecture and security automation. Knowledge of authentication protocols including OAuth 2.0, OpenID Connect (OIDC), SAML, LDAP, and SCIM. Experience working in Agile environments and leading technical initiatives across distributed teams. Relevant certifications in AWS, Azure, Kubernetes (CKA), Terraform, HashiCorp Vault, or Security (CISSP, Security+, etc.) are highly desirable. DevSecOps & CI/CD GitHub Actions, Jenkins, Azure DevOps, GitLab CI Terraform, Ansible Prometheus, Grafana, Splunk, Datadog Git & Version Control OAuth 2.0, OpenID Connect (OIDC), SAML, LDAP, SCIM Infrastructure as Code (IaC) Site Reliability Engineering (SRE)