Senior Security Engineer, IAM
Offer summary
Qualifications:
5+ years of IAM experience in enterprise environments., Expertise in Okta, including advanced authentication policies and API automation., Strong automation skills using Python or iPaaS tools like Tines or Okta Workflows., Experience with IGA platforms such as Lumos or ConductorOne..Key responsibilities:
- Design and implement scalable identity solutions and access workflows.
- Collaborate with cross-functional teams to gather requirements and develop technical specifications.
- Refactor authentication frameworks to incorporate advanced conditional access controls.
- Mentor engineers and lead strategic initiatives in identity security.
Job description
GitLab is an open core software company that develops the most comprehensive AIpowered DevSecOps Platform, used by more than 100,000 organizations. Our mission is to enable everyone to contribute to and cocreate the software that powers our world. When everyone can contribute, consumers become contributors, significantly accelerating the rate of human progress. This mission is integral to our culture, influencing how we hire, build products, and lead our industry. We make this possible at GitLab by running our operations on our product and staying aligned with our values. Learn more about Life at GitLab.
Thanks to products like Duo Enterprise, and Duo Workflow, customers get the benefit of AI at every stage of the SDLC. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier. All team members are encouraged and expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact across our global organization.
An overview of this role The Identity Engineering team is on a mission to transform how our workforce ecosystem securely accesses the tools they need to do their best work, advancing from foundational controls to sophisticated, automated governance.
As our new Senior Identity Security Engineer, youll be a technical leader and strategic thinker who thrives in ambiguous situations. Youre passionate about designing elegant solutions to complex identity challenges, whether thats architecting enterprisescale conditional access policies or building observability for nonhuman identities. Youll serve as a DRI (Designated Responsible Individual) for critical systems, write technical proposals that influence our roadmap, and mentor teammates while driving crossfunctional initiatives.
This isnt about maintaining the status quo its about architecting the future of identity security for a rapidly scaling company operating in regulated environments.
What you’ll do
- Design comprehensive identity solutions that scale with our business growth, from AI agent governance frameworks to privileged access workflows that eliminate standing access through justintime provisioning
-
- Drive crossfunctional initiatives with Security, IT, Engineering, and Business teams to extract requirements from ambiguous business needs and translate them into actionable technical specifications
-
- Refactor our authentication framework to implement advanced conditional access controls—device trust, locationbased policies, riskbased stepup authentication, and behavioral analytics across our entire SaaS ecosystem
-
- Support critical identity platforms and drive their strategic evolution through technical proposals and design documents that influence our multiyear roadmap
-
- Lead the consolidation of fragmented automations into maintainable, resilient workflows that can handle the complexity of enterprisescale identity management
-
- Pioneer nonhuman identity governance by designing comprehensive monitoring and management solutions for service accounts, API keys, certificates, and emerging AI agent identities
-
- Mentor intermediate engineers on both technical implementation and strategic thinking, helping them develop expertise in modern identity security practices
-
What you’ll bring
- 5+ years of IAM experience designing and implementing enterprisescale solutions
-
- Expertlevel Okta expertise including advanced authentication policies, lifecycle workflows, and API automation
-
- Strong automation experience using Python or iPaaS tools (Tines, Okta Workflows)
-
- Experience with IGA platforms like Lumos, ConductorOne or similar IGA tools
-
- Strategic communication skills for writing technical proposals and leading crossfunctional initiatives
-
- Experience in regulated environments with knowledge of compliance frameworks (FedRAMP, SOC2, SOX)
-
- Collaborative mindset with experience mentoring teammates and driving technical initiatives
-
Nice to have Qualifications:
- Passion for emerging identity challenges including AI agent governance, nonhuman identity management, zerotrust architecture, and behavioral analytics
-
How GitLab will support you - Benefits to support your health, finances, and wellbeing
-
- All remote, asynchronous work environment
-
- Flexible Paid Time Off
-
- Team Member Resource Groups
-
- Equity Compensation & Employee Stock Purchase Plan
-
- Growth and development budget
-
- Parental leave
-
- Home office support
-
Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If youre excited about this role, please apply and allow our recruiters to assess your application.
The Identity Engineering team is on a mission to transform how our workforce ecosystem securely accesses the tools they need to do their best work, advancing from foundational controls to sophisticated, automated governance.
As our new Senior Identity Security Engineer, youll be a technical leader and strategic thinker who thrives in ambiguous situations. Youre passionate about designing elegant solutions to complex identity challenges, whether thats architecting enterprisescale conditional access policies or building observability for nonhuman identities. Youll serve as a DRI (Designated Responsible Individual) for critical systems, write technical proposals that influence our roadmap, and mentor teammates while driving crossfunctional initiatives.
This isnt about maintaining the status quo its about architecting the future of identity security for a rapidly scaling company operating in regulated environments.
What you’ll do
- Design comprehensive identity solutions that scale with our business growth, from AI agent governance frameworks to privileged access workflows that eliminate standing access through justintime provisioning
- Drive crossfunctional initiatives with Security, IT, Engineering, and Business teams to extract requirements from ambiguous business needs and translate them into actionable technical specifications
- Refactor our authentication framework to implement advanced conditional access controls—device trust, locationbased policies, riskbased stepup authentication, and behavioral analytics across our entire SaaS ecosystem
- Support critical identity platforms and drive their strategic evolution through technical proposals and design documents that influence our multiyear roadmap
- Lead the consolidation of fragmented automations into maintainable, resilient workflows that can handle the complexity of enterprisescale identity management
- Pioneer nonhuman identity governance by designing comprehensive monitoring and management solutions for service accounts, API keys, certificates, and emerging AI agent identities
- Mentor intermediate engineers on both technical implementation and strategic thinking, helping them develop expertise in modern identity security practices
-
- 5+ years of IAM experience designing and implementing enterprisescale solutions
- Expertlevel Okta expertise including advanced authentication policies, lifecycle workflows, and API automation
- Strong automation experience using Python or iPaaS tools (Tines, Okta Workflows)
- Experience with IGA platforms like Lumos, ConductorOne or similar IGA tools
- Strategic communication skills for writing technical proposals and leading crossfunctional initiatives
- Experience in regulated environments with knowledge of compliance frameworks (FedRAMP, SOC2, SOX)
- Collaborative mindset with experience mentoring teammates and driving technical initiatives
-
- Passion for emerging identity challenges including AI agent governance, nonhuman identity management, zerotrust architecture, and behavioral analytics
-
- Benefits to support your health, finances, and wellbeing
- All remote, asynchronous work environment
- Flexible Paid Time Off
- Team Member Resource Groups
- Equity Compensation & Employee Stock Purchase Plan
- Growth and development budget
- Parental leave
- Home office support
-
Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If youre excited about this role, please apply and allow our recruiters to assess your application.
How GitLab will support you
Nice to have Qualifications:
What you’ll bring
Required profile
Experience
Other Skills
- Mentorship
- Collaboration
Security Engineer Related jobs
Marlowe Fire and Security
- From: United Kingdom (Full Remote)
- Full time
6sense
- From: Washington (USA) (Full Remote)
- Full time
Okta
- From: Spain (Full Remote)
- Full time
Stripe
- From: New York (USA) (Full Remote)
- Full time
Coursera
- From: United States (Full Remote)
- Full time