Saml And Oidc

Saml And Oidc Engineer Jobs

2 jobs found

Today

Principal Identity Cybersecurity Engineer

The MITRE Corporation McLean, VA

McLean, VA

Today

$173k - $259k/yr Full time Data Security Identity and Access Management Identity Governance And Administration

Apply Now

Job Description

Lead ICAM and identity cybersecurity engineering work to translate mission needs into Zero Trust-aligned identity solutions for government and MITRE initiatives.

Responsibilities

Translate mission needs into ICAM technical requirements, interfaces, and measurable outcomes.
Design and assess Zero Trust-aligned ICAM architectures and reference designs.
Engineer authentication, authorization, and federation solutions, including examples such as SAML/OIDC and step-up authentication.
Manage credential and trust services, including PKI and certificates.
Lead Identity Governance & Administration (IGA) activities such as provisioning, joiner-mover-leaver workflows, and authoritative source integration.
Develop and steer RBAC, ABAC, and PBAC models, including entitlement and attribute strategies and privileged-access controls.
Build ICAM solutions for constrained environments (limited connectivity and offline sync) and define test strategies, roadmaps, and integration plans.
Partner with security assessors and stakeholders to deliver auditable solutions mapped to required controls.
Collaborate with engineers, integrators, and vendors on technology evaluations, trade studies, reusable assets, and mentorship.

Requirements

Typically requires 10 years of related experience with a Bachelor’s degree; or 8 years with a Master’s degree; or a PhD with 5 years of related experience; or an equivalent combination of related education and work experience.
Strong analytical and problem-solving skills with sound technical judgment.
Strong written and verbal communication skills.
Demonstrated ability to deliver results and collaborate across teams.
Ability to work effectively in secure/classified environments.
Continued employment on this work is contingent upon meeting and maintaining government security eligibility requirements (requirements may change based on sponsor needs).
Must have an active Top Secret U.S. Government issued Security Clearance; U.S. Citizenship is required to be considered for a security clearance under U.S. Government eligibility requirements.
Requires a minimum of 4 days per week on-site.

Technologies

SAML/OIDC
Step-up authentication
PKI
Certificates
RBAC
ABAC
PBAC

Department Summary

L527 Cryptography, ICAM, and System Assurance: multi-disciplinary team focused on Cryptography, System Assurance, and Identity, Credential and Access Management (ICAM).
Develop and apply scalable approaches for systems and software; evaluate technology and solutions; lead and foster external partnerships.
Support Federal Government efforts to architect and apply modern ICAM technologies to secure systems, software, and protocols.
Apply ICAM techniques including emerging ICAM technologies for security and privacy, zero trust architectures, post-quantum cryptography, non-human and agentic identity, and secure multi-party federation.
Assess policy and technical constraints and facilitate deployment of ICAM solutions into cloud, hybrid, and on-premises environments for enterprise and tactical use cases.
Work at the intersection of cybersecurity and AI for trustworthy applications of AI to ICAM (e.g., autonomous network defense and assessing code for software weaknesses) and develop frameworks for evaluating assurance of AI-based techniques.
Conduct R&D, evaluation and testing, and operational support for high-priority sponsor mission applications, MITRE Labs initiatives, and internal R&D programs.

Preferred Qualifications

Degree in Computer Science, Cybersecurity, Electrical/Computer Engineering, or related field.
Systems engineering experience (requirements, architecture, integration, test) and familiarity with development lifecycles.
Experience applying security principles to enterprise architecture and system design.
Strong understanding of ICAM concepts supporting a Zero Trust security model.
Familiarity with threats/attack patterns relevant to identity and access systems.
Interest in applied research and building reusable, scalable technical approaches.
TS/SCI eligibility.

Clearance Requirements

Minimum clearance required: Top Secret.
Must have or obtain: Top Secret within one year from the date of hire.

Compensation & Work Location

Location: McLean, VA (on-site)
Salary range: USD 172,800 - 259,200 per year
Annual range midpoint structure: $172,800 - $216,000 - $259,200

View full job page →

14d ago

Lead Corporate Security Engineer

Suno New York, NY

New York, NY

14d ago

$165k - $220k/yr Full time Endpoint Security Identity And Access Governance Identity and Access Management

Apply Now

Job Description

Lead the corporate security domain end to end for Suno’s Corporate IT environment, set the standards, and drive roadmap execution.

Responsibilities

Own corporate security end to end across identity and access governance, endpoint and vulnerability management, detection and response, third-party integration risk, vendor assessment, and SaaS posture
Build the security team, enable others, and stay hands-on to mature systems, processes, and behaviors
Set the corporate security roadmap for what to secure, in what order, and to what bar, with buy-in from leadership and XFN stakeholders
Own Suno’s access model, including RBAC and entitlement design, least-privilege defaults, and the governance layer in Lumos that enforces them
Define the expected standard for access reviews, certifications, and approvals, then build toward it rather than importing an external framework
Drive access lifecycle automation so joiner/mover/leaver is correct by default, with exceptions visible
Develop a model for non-human identity (service accounts, agents, automations) as these accounts represent an increasing share of access
Own the security standard for the fleet: hardening baseline, compliance signals, device trust, and how endpoint posture informs access decisions
Own third-party vulnerability management as a program, including coverage, risk-based remediation SLAs, reporting, and negotiation with teams responsible for tooling
Partner with the IT engineer who owns Kandji to ensure security standards become deployed policy without degrading how people work
Own EDR deployment and maintenance
Collaborate with Detection and Response on corporate security incidents until closure
Own third-party access evaluation: integration and OAuth review for Slack, Google Workspace, and the rest of the portfolio, plus vendor security assessment at purchase and renewal
Define risk appetite in practice and make it understandable for consistent application by others
Turn recurring decisions into policy, scope guidance, and tooling so the review queue shrinks as the company grows
Build and own the SaaS application program, including the bar, assessment cadence, and remediation process
Improve tenant-level configuration across the portfolio: SSO and SCIM coverage, MFA and session policy, admin role hygiene, OAuth grant and token management, and data sharing defaults
Work with IT, Security, Engineering, AI Enablement, and Legal to shape how Suno builds and buys
Influence the scope of next steps, including how GRC plugs in, what to automate versus staff, and where to invest next
Mentor and raise the technical bar for partners, including those who are not security specialists

Requirements

~8+ years in corporate/enterprise security or security engineering, including owning identity, endpoint, or SaaS security as a domain (not only ticket-based work)
Deep hands-on expertise with a modern IdP and IGA/access-governance tooling (Lumos, Veza, ConductorOne, Opal, or similar)
Experience designing entitlements/RBAC across a large SaaS portfolio and understanding operational tradeoffs
Endpoint security depth in a macOS-primary fleet, including MDM-delivered hardening, compliance, device trust, and scaled patch/vulnerability management
Strong command of OAuth, SAML, OIDC, and SCIM, plus the risk model for third-party integrations
Proven ability to set a security standard that others can apply without direct enforcement by you (policy, tooling, defaults, or all three)
Ability to influence engineering and business teams that do not report to you, early enough to change outcomes
Automation fluency with Python or TypeScript, REST APIs, and a habit of building integrations/internal tooling
Excellent writing and judgment under ambiguity; able to align with executives and adjust direction based on evidence
Calibrated sense of risk, including communicating likelihood, impact, and tradeoffs

Technologies

Lumos, Veza, ConductorOne, Opal, Kandji, EDR, OAuth, SAML, OIDC, SCIM, RBAC, MFA

Compensation

$165,000 - $220,000 per year

Benefits

Company equity package
401(k) with 3% Employer Match and Roth 401(k)
Medical, Dental, & Vision Insurance (PPO w/ HSA & FSA options)
11 Paid Holidays + Unlimited PTO & Sick Time
16 weeks of paid parental leave
Creative education stipend
Generous commuter allowance
In-office lunch (5 days per week)

First 90 Days

Form an informed view of Suno’s security posture
Build working relationships with IT engineers and the broader Security team
Identify the three things the team’s view is wrong about

First 6 Months

Establish a corporate security roadmap aligned with IT and the CISO
Make sequencing and tradeoffs explicit
Ensure highest-risk items are already moving

First Year

Reduce entitlement sprawl and the vulnerability backlog measurably
Align detection to real risks
Keep third-party review fast enough that teams do not route around it
Sustain the standard through tooling and shared judgment rather than direct involvement

Helpful, Not Required

Insider risk or DLP programs
Zero-trust network access
SOC 2 or ISO program ownership
Just-in-time access patterns or identity-as-code
Securing AI agent and non-human identity access
Experience as the first or second security hire at a fast-growing company

Location and Work Policy

New York, NY (onsite)
Expected to work from Suno’s NYC or Cambridge, MA office 5 days per week, per Suno’s policy
Eligible travel up to 25% to lead team members and support offices across Suno locations
Deliberate cadence in Cambridge and NYC during the first six months

Additional Notes

Applicants must be eligible to work in the US
Full-time employees receive competitive equity packages and comprehensive benefits
Base salary may vary based on location, skills, qualifications, and experience

View full job page →

Saml And Oidc Engineer Jobs

Principal Identity Cybersecurity Engineer

Lead Corporate Security Engineer

Get Saml And Oidc Engineer Jobs alerts