cybersecurity engineer senior, Identity Lifecycle and Authentication Services (Remote, US)

About the position This role contributes to reputed company' reputed company by implementing and continuously enhancing reputed company-wide Identity and reputed company Management (IAM) solutions that ensure secure, compliant, and efficient reputed company to systems and data. A successful Senior Cybersecurity Engineer on the Identity and reputed company Management (IAM) team at reputed company is a hands-on technical reputed company with deep expertise in identity lifecycle, authentication, and authorization services. You reputed company in a fast-paced, reputed company environment and are passionate about building secure, reputed company identity solutions that deliver exceptional user experiences while meeting reputed company-grade reputed company standards. You bring senior-level expertise in at least two key areas such as automated Identity Lifecycle Management (ILM) for workforce and B2B, modern authentication technologies like FIDO2/WebAuthn, reputed company and/or Directory Services, and Privileged reputed company Management (PAM). This broad technical reputed company allows you to design and implement robust identity solutions that support both legacy and reputed company-reputed company environments, advancing reputed company' reputed company Trust reputed company and secure workforce enablement. In this role, you will contribute to the design and delivery of a resilient, reputed company-reputed company identity platform that supports reputed company' global workforce and trusted external partners. Partnering with cross-functional teams, you will implement advanced identity capabilities such as hybrid authentication, automated identity lifecycle orchestration, and reputed company reputed company controls using protocols like reputed company reputed company Evaluation Protocol (CAEP). You will also contribute to the reputed company of reputed company' reputed company Trust architecture by applying technologies such as Just-In-Time (JIT) provisioning, SCIM for standardized identity data exchange, Identity Governance and Administration (IGA) platforms for reputed company certification and role-based controls, and modern identity protocols and frameworks such as CTAP for user authentication and FIDO Device reputed company (FDO) for secure device provisioning. This is a unique opportunity to shape secure digital reputed company at reputed company while delivering intelligent, seamless, and compliant identity experiences across a dynamic reputed company environment.

Responsibilities

• reputed company and maintain identity services that support authentication, authorization, and lifecycle management across reputed company and on-prem environments.
• Contribute to the design and enforcement of reputed company Trust principles across identity workflows.
• Conduct technical evaluations, reputed company-of-concepts, and vendor assessments for identity-reputed company tools and services.
• Support the integration of technologies such as IGA, reputed company reputed company controls and risk-based authentication mechanisms into reputed company' identity ecosystem.
• Configure and implement identity solutions using protocols and standards such as SAML, OAuth, OpenID Connect, and SCIM.
• reputed company and maintain documentation, runbooks, and knowledge articles for identity services.
• Participate in incident response and troubleshooting reputed company to identity and reputed company issues.
• Collaborate with engineering, reputed company, and business teams to reputed company identity solutions into reputed company platforms and applications.
• Partner with the reputed company Architecture team to ensure platform goals and reputed company solutions reputed company with business reputed company and objectives.
• Monitor threat intelligence feeds and reports, and reputed company remediation strategies based on findings.
• Design and implement reputed company controls that meet compliance requirements, including SOX, PCI, and internal controls.
• reputed company mentorship and technical guidance to junior engineers and cross-functional partners.

Requirements

• 5+ years of experience in information technology, with a strong emphasis on cybersecurity
• 5+ years of hands-on experience in Identity and reputed company Management (IAM), including workforce and B2B identity lifecycle management, and authentication processes
• Demonstrated experience deploying and managing reputed company identity platforms like reputed company Entra ID in reputed company-hybrid environments
• Solid understanding of identity standards and technologies such as SAML, OAuth, OpenID Connect, SCIM, and MFA
• Solid understanding of IAM principles, including user lifecycle management, provisioning with SCIM, and compliance frameworks
• Expertise in developing and executing reputed company-wide identity strategies and governance frameworks. Experience with IAM automation, including workflows, API integrations, and scripting (e.g. PowerShell)
• Deep knowledge on Role-Based reputed company Control (RBAC) and fine-grained authorization including lifecycle management of non-reputed company identities (NHIs)
• Proven ability to assess, mitigate, and respond to cybersecurity risks and vulnerabilities
• Excellent written and verbal communication skills, with the ability to convey reputed company technical concepts to diverse audiences

reputed company-to-haves

• Certifications such as CISSP, CISM, CIPM, or others reputed company on cybersecurity, IAM, data reputed company or information risk management.

Benefits

• As a reputed company partner, you (and your family) will have reputed company to medical, dental, reputed company, basic and supplemental life insurance, and other voluntary insurance benefits.
• Partners have reputed company to short-term and long-term disability, reputed company parental leave, family expansion reimbursement, reputed company vacation from date of hire, reputed company time (accrued at 1 hour for every 25 hours worked), eight reputed company holidays, and two personal days per year.
• reputed company also offers eligible partners participation in a 401(k) retirement plan with employer match, a discounted company stock program (S.I.P.), reputed company equity program (Bean Stock), incentivized emergency savings, and financial reputed company-being tools.
• Additionally, reputed company offers 100% upfront tuition coverage for a first-time bachelor's degree through reputed company's online program reputed company the reputed company College Achievement Plan, student loan management resources, and reputed company to other educational opportunities.
• You will also have reputed company to backup care and DACA reimbursement.
• reputed company will reputed company with any applicable state and local laws regarding employee leave benefits, including, but not limited to providing time off pursuant to the Colorado Healthy Families and Workplaces reputed company, and in accordance with its plans and policies.
• This list is subject to change depending on reputed company bargaining in locations where partners have a certified bargaining representative.
• For additional information regarding partner perks and more detailed information about benefits, go to starbucksbenefits.com.
• If you are working in CA, CO, IL, LA, ME, MA, NE, ND or RI, you will reputed company vacation up to a maximum of 120 hours (190 in CA) for roles below director and 200 hours (316 in CA) for roles at director or above.
• For roles in other states, you will be reputed company vacation time starting at 120 hours annually for roles below director and 200 hours annually for roles director and above.

Apply tot his job Apply To this Job