Senior Identity and Access Management Engineer

Senior Identity and Access Management Engineer

Job Category: Information Technology

Requisition Number: SENIO
004385

• Posted :
  September 9, 2026
• Full-Time

Showing 1 location

Job Summary

The Senior Engineer, Identity & Access Management designs, implements, andoperatessecure, scalable identity solutions across the enterprise. This hands-on senior engineering role helps protect UFCU's digital ecosystem by ensuring that users and systems have appropriate accessto resources at the right time. This role partners with Information Security, Platform Engineering, Product Engineering, Infrastructure, and Application teams to embed identity and access controls into UFCU's platforms, applications, and workflows.

The Senior Engineer, Identity & Access Management is an exempt position and reports to the Director, Information Security, and is part of the Information Security team at UFCU.

About UFCU

Our Credit Union was founded in 1936 and has grown to serve members throughout Texas and beyond. At UFCU, we are more than just a financial institution, and our people are more than just employees. We are dedicated to our purpose of empowering our Members to achieve financial success and build brighter futures
.

In pursuit of our aspiration that UFCU is
loved by millions of Members and built to thrive for generations
, we are guided by our values:

• Purposefully Member-Obsessed: We are driven by a profound sense of empathy to deeply understand our Members’ needs and preferences, what brighter futures means to them, and the obstacles in their way. We act in our Members’ best interests, forever seeking to empower their financial success.
• Possibilities Reimagined: We are inspired to courageously experiment, learn, and iterate in pursuit of positive impact for our Members, UFCU, and coworkers. We challenge assumptions, embrace diverse perspectives, and make use of data and insights.
• Performance Excellence Rooted in Unwavering Integrity: We do the right thing, always. We champion teamwork, accountability, continuous improvement, and celebrate successful outcomes of others, fostering an inclusive environment of excellence and collaboration.

Essential Functions

Identity & Access Management Engineering and Architecture

• Design, implement, and support enterprise identity and access management solutions across workforce, Member, third-party, and non-human identities, including service accounts, workload identities, and artificial intelligence agents.
• Engineer secure authentication and authorization mechanisms, including single sign-on, multifactor authentication,passwordless authentication using Fast Identity Online 2 and passkeys,credential sharding,including conditional and risk-based accessschemas.
• Implement andmaintainrole-based access control and attribute-based access control aligned with least privilege, least agency,and separation-of-duties principles.
• Support the key management program, including certificate lifecycle management,secrets management, and application programminginterfacesand model context protocol(MCP) client and server access.
• Embed identity controls and secure protocols into continuous integration and continuous delivery pipelines, Infrastructure as Code, and modern application architectures.

Identity Governance, Privileged Access, and Threat Response

• Deploy and manage leading-edge Identity Governance and Administration platforms.
• Conduct access certifications for regulatory compliance and manage access-request workflows, entitlement management, and role-lifecycle governance.
• Develop centralized, cross-team processes and procedures related to alljoiner,mover, and leaver activities.
• Implement and manage Privileged Access Management solutions using just-in-time and just-enough-access models; monitor and audit privileged activity and session recording.
• Deploy Identity Threat Detection and Response capabilities; monitor identity-related threats and anomalous behavior and integrate identity threat signals with security information and event management, security orchestration, automation, and response, and incident-response workflows.

Platform Resilience, Compliance, and Risk Management

• Design andmaintainhighly available identity and access management infrastructure with disaster-recovery capabilities, including redundancy, failover mechanisms, and break-glass access protocols.
• Align identity and access management controls with the National Institute of Standards and Technology Cybersecurity Framework 2.0 and applicable National Credit Union…