Lead Information Security Engineer - Authentication

Advance secure identity at enterprise scale. In this Lead Information Security Engineer role, you will shape the architecture, engineering, and strategic direction of authentication capabilities across USAA. You will modernize workforce identity services with a Zero Trust mindset, helping enable secure, scalable access for teams and applications across the organization.

Hybrid work in Plano, TX with remote eligibility in the continental U.S. for qualified candidates. You will collaborate across engineering, security, and business partners, providing technical authority for complex authentication and privileged access challenges.

What You’ll Do

• Ensure security requirements are addressed throughout the solution/application enablement and sustainment lifecycle.
• Design, develop, code, integrate, and test complex cross-functional security solutions, partnering with engineers or architects outside the immediate team when needed.
• Lead code and design reviews, and drive engineering efficiencies to support accurate planning and effective operations.
• Independently resolve complex production issues and lead end-to-end troubleshooting across multiple applications and systems.
• Partner with architecture to define direction for cross-functional or highly complex technologies within the authentication security domain.
• Use Site Reliability Engineering practices within your domain.
• Monitor and troubleshoot highly complex systems, tools, and vendor integrations, performing continuous research and analysis to identify, resolve, and report security issues.
• Collaborate with Security Analysts, IT, and business partners to tune, harden, and enhance security solutions and technologies as threats and trends evolve.
• Provide mentorship and guidance to junior engineers while fostering continuous learning and keeping the team current on security trends and technologies.
• Ensure risks tied to business activities are identified, measured, monitored, and controlled in line with risk and compliance policies and procedures.
• Influence and lead cross-functional efforts as a subject matter expert in authentication and identity security.
• Advance professional development through industry participation, publications, education, networking, and professional societies.

What You Bring

• Bachelor’s degree; or 4 years of relevant education and/or experience.
• 8 years of related experience in Security Engineering and/or Information Technology with a security focus, including experience leading company-wide technology projects or initiatives.
• Demonstrated experience architecting, engineering, and supporting enterprise authentication solutions using Okta Workforce Identity Engine, Microsoft Entra ID, Active Directory, ADFS, and related identity provider technologies.
• Proven experience designing and implementing authentication integrations using SAML, OpenID Connect (OIDC), OAuth, and other federation protocols across large, complex application environments.
• Extensive experience defining authentication standards, reference architectures, engineering patterns, and technical roadmaps as a senior technical authority for authentication and identity services.
• Hands-on experience implementing MFA, adaptive authentication, risk-based access controls, passwordless authentication, conditional access, and Zero Trust security principles.
• Demonstrated ability to lead and own security strategies, solutions, and/or initiatives through successful completion.
• Ability to address complex production issues through application and system troubleshooting.
• Experience advising on security architecture methods and controls to meet security, compliance, and audit requirements.

Relevant Technologies

• Okta Workforce Identity Engine
• Microsoft Entra ID
• Active Directory
• ADFS
• SAML
• OpenID Connect (OIDC)
• OAuth
• MFA
• Passwordless authentication
• Adaptive authentication
• Risk-based access controls
• Conditional access
• Zero Trust
• Site Reliability Engineering

USAA Benefits

• Comprehensive medical, dental and vision plans
• 401(k)
• Pension
• Life insurance
• Parental benefits
• Adoption assistance
• Paid time off program with paid holidays plus 16 paid volunteer hours
• Wellness programs
• Career path planning and continuing education

Location / Travel

• This role is remote eligible in the continental U.S. with occasional business travel.
• Individuals residing within a 60-mile radius of a USAA office will be expected to work on-site four days per week.

Compensation

The salary range for this position is $142,320 - $273,930 per year.

Visa Sponsorship

USAA does not provide visa sponsorship for this role.