Sr Identity and Access Management Engineer

Sr Staff Identity and Access Management Engineer

Join to apply for the Sr Staff Identity and Access Management Engineer role at GEICO.

$/yr - $/yr

GEICO is seeking an experienced Engineer with a passion for building high performance, minimal maintenance, zero-downtime platforms, and applications. You will help drive our insurance business transformation as we transition from a traditional IT model to a tech organization with engineering excellence as its mission.

Our Senior Staff Engineer is a key member of the engineering staff, working across the organization to provide friction‑less experience for our customers and maintain the highest standards of compliance, protection and availability. You will be part of a team that thrives and succeeds in delivering high quality technology products and services in a hyper‑growth environment where priorities shift quickly. The ideal candidate has broad and deep technical knowledge of the Identity Directory Services and solutions that ensure secure authorization to GEICO’s data assets.

• Lead execution and adoption of modern authentication and authorization mechanisms (SAML, OIDC/OAUTH2)
• Engage peers and leaders at all levels.
• Consistently share best practices and improve processes within and across teams
• Determine and support resource requirements, evaluate operational processes, measure outcomes to ensure desired results, and demonstrate adaptability and sponsoring continuous learning
• Own the complete project lifecycle for application integrations of both on‑premises and SaaS applications with our IGA platform.
• Collaborate with application team to implement tokenization solutions that reduce sensitive data exposure, thereby enhancing data security and minimizing the risk of unauthorized access
• Stay at the forefront of emerging identity trends, technologies, and best practices, and apply this knowledge to enhance GEICO’s data protection strategies
• Provide technical guidance and mentorship to the team, fostering a culture of innovation, collaboration, and continuous improvements
• Collaborate with cross‑functional teams, including security, compliance, and application teams to ensure the seamless integration and alignment of solutions with organizational goals
• Build resilient and scalable architecture, driving innovation and cost efficiency

• Experience building the architecture and design (architecture, design patterns, reliability, and scaling) of new and current systems
• Fluency in Dev Ops Concepts, Cloud Architecture, and the Software Development Lifecycle
• Experience in security protocols and products:
  Understanding of Active Directory, Kerberos, LDAP, SAML, OAuth, and OIDC
• Experience with continuous delivery and infrastructure as code
• Knowledge of developer tooling across the software development life cycle (task management, source code, building, deployment, operations, real‑time communication)
• Experience with micro‑services oriented architecture and extensible REST APIs
• In depth knowledge of Datacenter structure, capabilities, and offerings, including the Azure platform, and its native services including the Azure platform and its native services
• Fluency and specialization with at least one modern language such as Java, Go, or Python
• In depth expertise in cryptographic protocols, digital certificates, and encryption standards such as X.509, Transport Layer Security (TLS), and Advanced Encryption Standard (AES)
• Strong problem‑solving abilities and a proactive approach to identifying and mitigating security risks and vulnerabilities
• Excellent communication skills, able to communicate complete technical concepts to technical and non‑technical stakeholders

• 10+ years of professional experience in technology or identity engineering
• 8+ years of experience with security, identity, architecture, and design
• 4+ years of experience with open‑source frameworks is desired
• 4+ years of experience with AWS, GCP, Azure, or another cloud service
• 1+ years of people management experience

• Bachelor’s degree in computer science, Information Systems, or equivalent education or work experience