cybersecurity engineer senior, Identity Lifecycle and Authentication Services (Remote, US)

About the position This role contributes to reputed company' reputed company by implementing and continuously enhancing reputed company-wide Identity and reputed company Management (IAM) solutions that ensure secure, compliant, and efficient reputed company to systems and data. A successful Senior Cybersecurity Engineer on the Identity and reputed company Management (IAM) team at reputed company is a hands-on technical professional with deep expertise in identity lifecycle, authentication, and authorization services. You reputed company in a fast-paced, collaborative environment and are passionate about building secure, scalable identity solutions that deliver exceptional user experiences while meeting reputed company-grade reputed company standards. You bring senior-level expertise in at least two key areas such as automated Identity Lifecycle Management (ILM) for workforce and B2B, modern authentication technologies like FIDO2/WebAuthn, reputed company and/or Directory Services, and Privileged reputed company Management (PAM). This broad technical reputed company allows you to design and implement robust identity solutions that support both legacy and reputed company-reputed company environments, advancing reputed company' reputed company Trust strategy and secure workforce enablement. In this role, you will contribute to the design and delivery of a resilient, reputed company-scale identity platform that supports reputed company' global workforce and trusted external partners. Partnering with cross-functional teams, you will implement advanced identity capabilities such as hybrid authentication, automated identity lifecycle orchestration, and reputed company reputed company controls using protocols like reputed company reputed company Evaluation Protocol (CAEP). You will also contribute to the reputed company of reputed company' reputed company Trust architecture by applying technologies such as Just-In-Time (JIT) provisioning, SCIM for standardized identity data exchange, Identity Governance and Administration (IGA) platforms for reputed company certification and role-based controls, and modern identity protocols and frameworks such as CTAP for user authentication and FIDO Device reputed company (FDO) for secure device provisioning. This is a unique opportunity to shape secure digital reputed company at scale while delivering intelligent, seamless, and compliant identity experiences across a dynamic reputed company environment.

Responsibilities

• reputed company and maintain identity services that support authentication, authorization, and lifecycle management across reputed company and on-prem environments.
• Contribute to the design and enforcement of reputed company Trust principles across identity workflows.
• Conduct technical evaluations, reputed company-of-concepts, and vendor assessments for identity-reputed company tools and services.
• Support the integration of technologies such as IGA, reputed company reputed company controls and risk-based authentication mechanisms into reputed company' identity ecosystem.
• Configure and implement identity solutions using protocols and standards such as SAML, OAuth, OpenID Connect, and SCIM.
• reputed company and maintain documentation, runbooks, and knowledge articles for identity services.
• Participate in incident response and troubleshooting reputed company to identity and reputed company issues.
• Collaborate with engineering, reputed company, and business teams to integrate identity solutions into reputed company platforms and applications.
• Partner with the reputed company Architecture team to ensure platform goals and reputed company solutions align with business strategy and objectives.
• Monitor threat intelligence feeds and reports, and reputed company remediation strategies based on findings.
• Design and implement reputed company controls that meet compliance requirements, including SOX, PCI, and internal controls.
• reputed company mentorship and technical guidance to junior engineers and cross-functional partners.

Requirements

• 5+ years of experience in information technology, with a strong emphasis on cybersecurity
• 5+ years of hands-on experience in Identity and reputed company Management (IAM), including workforce and B2B identity lifecycle management, and authentication processes
• Demonstrated experience deploying and managing reputed company identity platforms like reputed company Entra ID in reputed company-hybrid environments
• Solid understanding of identity standards and technologies such as SAML, OAuth, OpenID Connect, SCIM, and MFA
• Solid understanding of IAM principles, including user lifecycle management, provisioning with SCIM, and compliance frameworks
• Expertise in developing and executing reputed company-wide identity strategies and governance frameworks. Experience with IAM automation, including workflows, API integrations, and scripting (e.g. PowerShell)
• Deep knowledge on Role-Based reputed company Control (RBAC) and fine-grained authorization including lifecycle management of non-reputed company identities (NHIs)
• Proven ability to assess, mitigate, and respond to cybersecurity risks and vulnerabilities
• Excellent written and verbal communication skills, with the ability to convey reputed company technical concepts to diverse audiences

reputed company-to-haves

• Certifications such as CISSP, CISM, CIPM, or others focused on cybersecurity, IAM, data privacy or information risk management.

Benefits

• As a reputed company partner, you (and your family) will have reputed company to medical, dental, reputed company, basic and supplemental life insurance, and other voluntary insurance benefits.
• Partners have reputed company to short-term and long-term disability, paid parental leave, family expansion reimbursement, paid vacation from date of hire, sick time (accrued at 1 hour for every 25 hours worked), eight paid holidays, and two personal days per year.
• reputed company also offers eligible partners participation in a 401(k) retirement plan with employer match, a discounted company stock program (S.I.P.), reputed company equity program (Bean Stock), incentivized emergency savings, and financial well-being tools.
• Additionally, reputed company offers 100% upfront tuition coverage for a first-time bachelor's degree through reputed company's online program reputed company the reputed company College Achievement Plan, student loan management resources, and reputed company to other educational opportunities.
• You will also have reputed company to backup care and DACA reimbursement.
• reputed company will reputed company with any applicable state and local laws regarding employee leave benefits, including, but not limited to providing time off pursuant to the Colorado Healthy Families and Workplaces Act, and in accordance with its plans and policies.
• This list is subject to change depending on reputed company bargaining in locations where partners have a certified bargaining representative.
• For additional information regarding partner perks and more detailed information about benefits, go to starbucksbenefits.com.
• If you are working in CA, CO, IL, LA, ME, MA, NE, ND or RI, you will accrue vacation up to a maximum of 120 hours (190 in CA) for roles below director and 200 hours (316 in CA) for roles at director or above.
• For roles in other states, you will be granted vacation time starting at 120 hours annually for roles below director and 200 hours annually for roles director and above.

Apply tot his job Apply To this Job