Senior Identity Governance Engineer

Ready to be a Titan?

At Service Titan, we are building a next-generation identity fabric, and this role engineers the governance layer on top of it. Identity spans cloud environments, SaaS applications, data systems, machine identities, and now AI agents, which makes it one of the most sprawling attack surfaces in the enterprise. You will make sure every identity, whether a Titan, a third-party contractor, a service account, or an AI agent, has the right access, for the right reason, at the right time, and that we can prove it.

Corporate Engineering (IT) administer our identity platforms, including Okta and Lumos, and run lifecycle operations. Info Sec defines identity governance requirements and validates that controls work. You sit in Info Sec and engineer the governance layer: authentication and authorization design standards, entitlement models, access review automation, and audit-ready evidence. You administer Veza with Corporate Security, Security Architecture, Product Security, and Security Operations, work with Corporate Engineering and System Owners to put governance requirements into practice, and you will be a key owner of our ISPM and IGA program.

What you'll do:

You engineer identity governance: the tooling, automation, and design standards that make access reviewable and provable. Corporate Engineering and IT administer the identity platforms, and Info Sec GRC owns the policies and the review program.

Access Request Governance:
Define governance requirements and design patterns for access request workflows across privileged systems (code repositories, databases, infrastructure), including role-based, time-bound, delegated, and just-in-time access, and measure adoption so access is not granted outside the governed workflow. Corporate Engineering and IT administer Lumos and implement the workflows; you specify the requirements, build the monitoring that detects bypass, and validate that they work.

Authentication & Authorization Design:
Partner with Security Architecture to define authentication and authorization design standards (SSO, MFA and phishing-resistant requirements, OIDC/SAML/SCIM patterns, least-privilege role models) for enterprise tools, and review integrations against them.

Authorization Governance & Entitlement Design:
Provide the technical design for authorization decisions on job functions and privileged data access, including critical systems such as ST Admin roles, Snowflake, Salesforce, and other high-risk entitlements. Build role models scoped to job function and normalize entitlement data across applications in Veza so access can be reviewed like for like.

Access Review & Lifecycle Automation:
Build and operate the tooling and automation behind the user access review program (SOX ITGC, PCI DSS, SOC 1/2, ISO 27001), which Info Sec GRC owns, and behind joiner/mover/leaver control assurance, including leaver access-reversion evidence, reconciliation against the authoritative HR source, and orphaned account detection.

Privileged Access Governance:
Build visibility into standing privileged access across core cloud infrastructure and the data platform and drive it down, moving toward time-bound elevation (PIM and JIT) with governed exceptions for the access that must remain.

Identity Fabric Architecture:
Define the target-state governance architecture across Okta, Veza, and Lumos and the risk-based identity lifecycle it supports. You administer Veza in combination with Corporate Security, Security Architecture, Product Security, and Security Operations, building its data source integrations, policies, and alerts. Corporate Engineering and IT administer Okta and Lumos, and you partner with them on lifecycle and workflow integration.

ISPM & Continuous Governance:
Add continuous monitoring to periodic certifications. Build identity analytics that detect over-privileged accounts, shadow identities, dormant access, and identity drift, and automate remediation workflows with named owners.

Non-Human Identity & AI Security:
Build the inventory and governance workflows for service accounts, API keys, personal access tokens, and AI agents, including ownership, rotation, and attestation requirements, and drive remediation with owning teams. Ensure AI integrations are covered by rigorous entitlement management, in partnership with our AI governance review process.

Cross-Functional Collaboration:

Work with Corporate Engineering, the administrative owner of identity platforms and lifecycle operations, alongside…