Senior Security Engineer, Identity and Access Management
Senior security engineer who owns HackerOne's identity and access management lifecycle end to end, designing access models, identity-as-code automation (Okta, AWS IAM, Lumos), and AI/LLM-powered continuous access review for people, service accounts, and AI agents. Remote role targeting candidates near several US hubs, London, or the Netherlands.
- Compensation
- $180K–$220K / yr
- Location
- Seattle
- Work setup
- Remote
- Seniority
- Senior
- Employment
- Not specified
- Experience
- 5+ years
- Category
- Security
- Posted
Skills
Must have
- 5+ years of experience in identity and access management, security engineering, or software engineering with substantial ownership of identity systems
- Hands-on experience operating an enterprise identity provider such as Okta, including SAML, OIDC, SCIM, and lifecycle automation
- Experience managing identity across an enterprise SaaS estate such as Google Workspace, Salesforce, and Workday, including SCIM provisioning and group-driven entitlements
- Experience with cloud IAM, ideally AWS, including policy design and short-lived credentials
- Strong software engineering fundamentals with proficiency in Python, Go, or a similar language, and hands-on use of AI and LLM tooling and agentic coding tools in production engineering work
Nice to have
- Identity work in a regulated sector such as financial services, healthcare, or government, and producing access control evidence for audit against PCI DSS, HIPAA, SOC 2, or ISO 27001
- Managing identity infrastructure as code, and access request or governance tooling, for example Terraform and Lumos
- Mobile device management (MDM) alongside identity, for example Kandji integrated with Okta: device trust policies, platform SSO, and endpoint enrollment
- Non-human, workload, and privileged access: secrets management, short-lived credentials, and service-to-service authentication
- Building AI or LLM-powered tooling for security or identity workflows
- Detection and incident response for identity-centered incidents such as credential compromise, session abuse, or entitlement misuse
- Industry certification in identity or security, such as IDPro CIDPRO, Okta certifications, AWS Certified Security – Specialty, or CISSP
Full description
HackerOne is a global leader in Continuous Threat Exposure Management (CTEM) and the only solution provider that pairs the simultaneous trust of the Fortune 500 and the world's largest community of security researchers to secure the AI-native enterprise. The H1 Platform unites agentic AI solutions with security researchers ingenuity to continuously discover, validate, prioritize, and remediate exposures across code, cloud, and AI systems. Through solutions such as agentic and human offensive security testing, AI red teaming, code security, validation, and remediation, HackerOne delivers measurable, continuous reduction of cyber risk for enterprises. Industry leaders, including Anthropic, , General Motors, Goldman Sachs, Lufthansa, Uber, UK Ministry of Defence, and the U.S. Department of Defense, trust HackerOne to safeguard their digital ecosystems. HackerOne was recognized in Gartner’s Emerging Tech Impact Radar: AI Cybersecurity Ecosystem report for its leadership in AI Security Testing.
HackerOne Values
HackerOne is dedicated to fostering a strong and inclusive culture. HackerOne is Customer Obsessed and prioritizes customer outcomes in our decisions and actions. We Default to Disclosure by operating with transparency and integrity, ensuring trust and accountability. Employees, researchers, customers, and partners Win Together by fostering empowerment, inclusion, respect, and accountability.
Senior Security Engineer, Identity and Access Management
Remote Location:
San Francisco, California, U.S.
- Seattle, Washington, U.S.
- Austin, Texas, U.S.
- Washington, D.C., U.S.
- Boston, Massachusetts, U.S.
Position Summary
At HackerOne, identity is at the heart of how we protect the data we are trusted with most, our customers' vulnerabilities. We are building our Identity and Access Management capability with an AI-first approach, focused on engineering and not administration alone. As a Senior Security Engineer, you will design and deliver the access models and the automation behind them, so that people and systems can access only the right data, at the right time, in the right way.
This role operates across the full identity lifecycle, from onboarding and creation through change and removal, for people, service accounts, and AI agents alike. You will help scale what a small team can accomplish by embedding automation, intelligence, and AI into how access is granted, reviewed, and removed, working toward least privilege for humans and least agency for AI.
At HackerOne, we embrace a Flexible Work approach that gives us the freedom to do our best work while also fostering the connections and community that make us stronger. Reflecting this philosophy, this is a remote role targeted for candidates within ~50 miles of Austin TX, Seattle WA, Washington DC, San Francisco CA, or Boston MA, or within commuting distance of our London or Netherlands locations. We believe this balance of proximity and flexibility gives Hackeronies the chance to occasionally come together, fostering collaboration, connection, and in-person moments that enrich our culture, while still preserving the benefits of remote work.