[Remote] Senior Security Engineer, Identity & Access Management

Note: The job is a remote job and is open to candidates in USA. Valon is building an AI-native operating system for regulated finance, focusing on mortgage servicing. They are seeking a Senior Security Engineer, Identity & Access Management to design, implement, and operate IAM systems, ensuring secure governance of identities within the organization and customer-facing capabilities.

Responsibilities

• Design and support end-to-end lifecycle of workforce identity systems including identity automation, access management, and least-privilege enforcement across internal systems
• Support design of secure identity design patterns for product teams building on ValonOS
• Manage and evolve Valon's IdP in conjunction with IT including SSO integrations, MFA policies, conditional access rules, and directory synchronization
• Define and enforce RBAC and group-based access policies for internal applications, cloud environments, and development tooling
• Support privileged access management (PAM) for internal infrastructure in conjunction with Engineering teams
• Design and build AI-assisted workflows that automate and accelerate core IAM operations
• Evaluate AI risks across IAM pipelines, ensuring appropriate security controls around data exposure, prompt injection and other threats
• Collaborate with Product, Engineering, Data, Compliance, Legal, and other teams to identify and drive mitigation for data security risks
• Support other operational and on-call duties such as vulnerability management, regulatory compliance (SOC 2, CCPA, NYDFS, FTC), policy development, incident response and security reviews

Skills

• 5+ years in security engineering roles with a core focus on identity and access management
• Bachelor's degree in Information Security, Computer Science, Technology or related field
• Relevant security certifications (e.g., CISSP, CISM, CCSK, CCSP or similar)
• Hands-on experience with an enterprise IdP (Okta, Entra ID, or Google Workspace) including SSO, MFA, SCIM
• Deep understanding of authentication and authorization models across applications - SAML, OIDC/OAuth 2.0, RBAC, ABAC, and API access controls
• Hands-on experience with modern identity security technologies and tooling
• Extensive hands-on IAM security engineer with proven ownership of enterprise identity solutions, able to operate autonomously, drive complex cross-functional efforts, and influence across teams
• Deep expertise in modern identity protocols and standards: SAML 2.0, OIDC/OAuth 2.0, SCIM, LDAP, and related specifications
• Proven experience administering and scaling IdP platforms (e.g., Okta, Azure AD / Entra ID, Google Workspace) including SSO, MFA, conditional access, and directory sync
• Solid background in cloud IAM (GCP preferred), including service accounts, workload identity federation, and policy-as-code approaches
• Strong expertise in building PAM solutions / identity vaults and enforcing least-privilege across human and non-human identities
• Experience building AI/LLM-powered workflows — ideally in a security or operations context — with a practical understanding of the identity and access risks they introduce
• Familiarity with securing non-human and agentic identities, including AI service accounts, API key governance, and audit logging for automated systems
• Applied knowledge with industry security and compliance frameworks (OWASP, NIST, CIS, SOC 2/ISO 27001 concepts)
• Excellent communication and collaboration skills, including the ability to explain complex security concepts to both technical and non-technical stakeholders
• Experience working in high-growth or startup environments is a plus

Benefits

• Competitive salary with a meaningful stake in the company via equity, and 401k plan
• We’ll invest in your physical and mental well-being with comprehensive medical, dental, & vision benefits
• We offer pre-tax deductions for public transportation, rideshare services, and parking expenses to make your commute more affordable and convenient
• Company wide orientation for you to successfully onboard and other learning & development opportunities including regular review cycles that feature 360 degree feedback
• Quarterly budgets for team and company outings. Use it for team swag, cooking classes, or team dinners!
• Flexible paid time off, sick days, and 11 company holidays
• 12 weeks off for both birthing and non-birthing parents - fully paid so you can focus your energy on your newest addition

Company Overview

Company H1B Sponsorship