Senior Identity Management Engineer

You know identity is the control plane for modern security, and you want to build one that people actually like using: passwordless, phishing-resistant, and invisible when it works.

You are a senior engineer who leads through design and example. You are excited about the identity problems that did not exist five years ago, such as securing workloads, service accounts, and AI agents, and you would rather define the answer than wait for a vendor to.

You automate. You would rather build the workflow than process the ticket, and you see AI as the way to make identity work continuous and self-correcting instead of manual and periodic.

• Offering competitive wages and benefits, that support your life both in and out of work
• Providing a flexible hybrid work schedule, meaning we expect the office to be your primary place of work, balanced with choice and control.
• Creating continuous learning opportunities to help you grow and upskill.
• Fostering a culture of inclusion where employees feel seen, heard and valued — and living it out every day.
• Empowering you to make a meaningful impact on people and the planet through your work and Steelcase’s ongoing commitment.

You’ll Support Meaningful Work By:

• Architecting and building the next generation of Steelcase’s identity platform: phishing-resistant authentication, Conditional Access, and privileged access management.
• Leading the retirement of legacy identity technologies and directory services, including reducing our dependence on legacy Active Directory, and designing the migration paths that get us there safely.
• Designing identity for non-human actors, including service accounts, workloads, and AI agents: how they authenticate, what they can reach, and how that access is reviewed and revoked.
• Building automation and AI-assisted workflows for provisioning, privileged access, anomaly detection, and remediation.
• Partnering with HR, IT, application owners, and engineering teams to make secure access the default and the easy path.
• Mentoring other engineers and setting technical standards and patterns for the Identity Management Office.
• Evaluating emerging identity and security technologies and running proofs of concept that shape our roadmap.

Minimum Qualifications

• Substantial hands‑on experience designing, implementing, or operating enterprise identity and access management solutions.
• Strong understanding of modern authentication and authorization, including protocols such as SAML, OIDC/OAuth, and FIDO2/passkeys, as well as directory services.
• A drive to automate identity work rather than repeat it, and comfort working against APIs such as Microsoft Graph. Whether you write the Power Shell or Python yourself or build it with AI and low‑code tooling matters far less to us than knowing what to automate and why.
• Experience leading technical initiatives and influencing outcomes across teams without direct authority.
• Bachelor’s degree in a related field, or equivalent experience.

Desired Skills and Experience

• Deep experience with Microsoft Entra , Conditional Access, Privileged Identity Management, and Intune integration.
• Experience with privileged access management platforms such as Cyber Ark, Delinea, or Beyond Trust.
• Experience securing workload identities, secrets, and machine-to-machine or agent-to-service access.
• Experience applying Zero Trust principles in a large, global enterprise.
• Have you helped an organization meaningfully shrink or eliminate its reliance on legacy Active Directory? That is rare, and we are not expecting it on day one. But we know legacy AD is a liability, we intend to do something about it, and we would love to talk with anyone who has been part of that journey.
• Experience using AI or automation to streamline identity operations, authentication…