Senior Security Engineer, Identity and Access Management

The role

You will design and deliver access models and automation for the full identity lifecycle. This includes managing identities for people, service accounts, and AI agents using an AI-first approach.

What you will do

• Own the identity lifecycle end to end for people, service accounts, and AI agents
• Design and build access models based on data classification
• Make time-bound access the default for critical data
• Engineer identity as code using version control across systems like Okta, Lumos, and AWS IAM
• Build AI and LLM-powered tooling for access review and anomaly detection
• Bring non-human identities under the same discipline as human ones
• Measure access and report opportunities to reduce unnecessary entitlement
• Partner with Engineering, Enterprise IT, and Compliance to embed identity controls
• Support detection and incident response as the identity responder

Required qualifications

• 5+ years of experience in identity and access management, security engineering, or software engineering with substantial ownership of identity systems
• Hands-on experience operating an enterprise identity provider such as Okta, including SAML, OIDC, SCIM, and lifecycle automation
• Experience managing identity across an enterprise SaaS estate such as Google Workspace, Salesforce and Workday, including SCIM provisioning and group-driven entitlements
• Experience with cloud IAM, ideally AWS, including policy design and short-lived credentials
• Strong software engineering fundamentals with proficiency in Python, Go, or a similar language
• Hands-on use of AI and LLM tooling and agentic coding tools in production engineering work

Nice to have

• Identity work in a regulated sector such as financial services, healthcare, or government
• Producing access control evidence for audit against requirements such as PCI DSS, HIPAA, SOC 2, or ISO 27001
• Managing identity infrastructure as code, and access request or governance tooling, for example Terraform and Lumos
• Mobile device management (MDM) alongside identity, for example Kandji integrated with Okta
• Non-human, workload, and privileged access: secrets management, short-lived credentials, and service-to-service authentication
• Building AI or LLM-powered tooling for security or identity workflows
• Detection and incident response for identity-centered incidents
• Industry certification in identity or security, such as IDPro CIDPRO, Okta certifications, AWS Certified Security – Specialty, or CISSP

Benefits

• Health (medical, vision, dental), life, and disability insurance
• Equity stock options
• Retirement plans
• Paid public holidays and unlimited PTO
• Paid maternity and parental leave
• Leaves of absence (including caregiver leave and leave under CO's Healthy Families and Workplaces Act)
• Employee Assistance Program

Before you apply

• Visa/work permit sponsorship is not available
• Employment at HackerOne is contingent on a background check

About the company

HackerOne is a global leader in Continuous Threat Exposure Management (CTEM). The H1 Platform unites agentic AI solutions with security researchers ingenuity to secure the AI-native enterprise.