Offer summary

Qualifications:

At least 3 years of experience in Application Security, Identity Engineering, or Cloud Security., Hands-on experience with Azure Entra ID and multi-tenant SaaS identity integrations., Strong understanding of modern identity standards like OAuth2, OIDC, and SAML., Familiarity with Microsoft Graph API, Azure RBAC, and securing Azure PaaS applications..

Key responsibilities:

Design and secure authentication and authorization flows across Azure applications.

Drive adoption of secure identity patterns such as OAuth2, OpenID Connect, and SAML.

Integrate and secure Azure Entra ID, including App Registrations and Graph API.

Support engineering teams with secure identity practices and contribute to compliance audits.

Job description

Veeam, the #1 global market leader in data resilience, believes businesses should control all their data whenever and wherever they need it. Veeam provides data resilience through data backup, data recovery, data portability, data security, and data intelligence. Based in Seattle, Veeam protects over 550,000 customers worldwide who trust Veeam to keep their businesses running. Join us as we move forward together, growing, learning, and making a real impact for some of the world’s biggest brands. The future of data resilience is here - go fearlessly forward with us.

We are looking for an Application Security Engineer to join our growing team of experts supporting our cloud-native SaaS platform. The SaaS solutions we develop and offer to our customers are built on Microsoft Azure, delivering secure, scalable, and enterprise-grade data protection services. This role will focus on building and maturing our identity and access management (IAM) strategy across our Azure multi-tenant applications.

Your tasks will include:

Designing and securing authentication and authorization flows across Azure multi-tenant enterprise applications
Driving adoption of secure identity patterns, including OAuth2, OpenID Connect, and SAML
Integrating and securing Azure Entra ID (formerly Azure AD), including App Registrations, App Roles, consent frameworks, and Graph API
Implementing and refining Role-Based Access Control (RBAC), Just-in-Time access (PIM), and conditional access policies
Conducting threat modeling and security reviews for IAM architecture and features
Collaborating with engineering and platform teams to harden identity surfaces and enforce least privilege access
Contributing to access management audit support for compliance frameworks such as FedRAMP, SOC 2, and ISO 27001

Technologies we work with:

Azure Entra ID, Microsoft Graph API, Azure App Registrations, API Management
Azure Functions, Cosmos DB, Azure Storage, Static Web Apps
Atlassian Suite, Azure DevOps, GitHub
IaC tools: Terraform, Azure ARM templates
CI/CD: Azure DevOps Pipelines, GitHub Actions
Observability: Azure Monitor, AppInsights, Elastic Cloud (ELK)

What we expect from you:

3+ years of experience in Application Security, Identity Engineering, or Cloud Security with a focus on IAM
Demonstrated hands-on experience with Azure Entra ID, including multi-tenant SaaS identity integrations
Strong understanding of modern identity standards: OAuth2, OIDC, SAML, SCIM
Familiarity with Microsoft Graph API, App Permissions, and Azure RBAC models
Experience designing and securing Azure PaaS applications
Proven ability to support engineering and SRE teams with secure identity practices
Experience working in CI/CD environments with integrated security tooling
Fluent English, with the ability to collaborate with globally distributed teams

Will be an advantage:

Experience leading or supporting SaaS compliance programs (FedRAMP, SOC 2, ISO 27001)
Familiarity with threat modeling methodologies (STRIDE, LINDDUN)
Experience with C#/.NET/GO and securing authentication flows in application code
Working knowledge of AWS identity services (IAM, Cognito, STS) a plus
Understanding of cryptography in application contexts (certificates, token signing, etc.)

We offer:

Unlimited PTO
Medical, dental, and vision benefits that start on day one
Flexible spending accounts
Life insurance and short-term and long-term disability coverage
Family planning support benefits, along with 100% paid maternity and parental leave
401k match
Veeam Care Days – additional 24 hours for your volunteering activities
Professional training and education, including courses and workshops, internal meetups, and unlimited access to our online learning platforms (Percipio, Athena, O’Reilly) and mentoring through our MentorLab program

Please note: If the applicant is permanently present outside of the United States, Veeam reserves the right to refuse to consider the application for a job. Remote work is only possible in case the employee is located in the United States.

#LI-Remote

The salary range posted is On Target Earnings (OTE), which is inclusive of base and variable pay. When making an offer of employment, Veeam will take into consideration the candidate’s expectations, experience, education, scope of responsibility for the role, and the current market demands.

United States of America Pay Range

$136,500—$195,000 USD

Veeam Software is an equal opportunity employer and does not tolerate discrimination in any form on the basis of race, color, religion, gender, age, national origin, citizenship, disability, veteran status or any other classification protected by federal, state or local law. All your information will be kept confidential.

Please note that any personal data collected from you during the recruitment process will be processed in accordance with our Recruiting Privacy Notice.

The Privacy Notice sets out the basis on which the personal data collected from you, or that you provide to us, will be processed by us in connection with our recruitment processes.

By applying for this position, you consent to the processing of your personal data in accordance with our Recruiting Privacy Notice.

Required profile