Senior Security Engineer, Identity & Access Management
Valon Tech3 days ago
Base Salary
$180k - $230k/yr
Responsibilities
- Design and support the end-to-end lifecycle of workforce identity systems, including identity automation, access management, and least-privilege enforcement.
- Support secure identity design patterns for product teams building on ValonOS.
- Manage and evolve the enterprise IdP, including SSO integrations, MFA policies, conditional access rules, and directory synchronization.
- Define and enforce RBAC and group-based access policies across internal applications, cloud environments, and development tooling.
- Support privileged access management for internal infrastructure with Engineering teams.
- Design and build AI-assisted workflows to automate IAM operations and evaluate AI risks including data exposure and prompt injection.
- Collaborate cross-functionally to identify and mitigate data security risks.
- Support vulnerability management, regulatory compliance, policy development, incident response, security reviews, and on-call duties.
Requirements
- 5+ years of security engineering experience with a core focus on identity and access management.
- Bachelor’s degree in Information Security, Computer Science, Technology, or a related field.
- Relevant security certification such as CISSP, CISM, CCSK, CCSP, or similar.
- Hands-on experience with an enterprise IdP such as Okta, Entra ID, or Google Workspace, including SSO, MFA, and SCIM.
- Deep knowledge of SAML 2.0, OIDC/OAuth 2.0, RBAC, ABAC, and API access controls.
- Deep expertise in identity protocols and standards including SAML 2.0, OIDC/OAuth 2.0, SCIM, and LDAP.
- Experience with cloud IAM, preferably GCP, including service accounts, workload identity federation, and policy-as-code approaches.
- Strong experience building privileged access management solutions and enforcing least privilege across human and non-human identities.
- Experience building AI/LLM-powered workflows and understanding the identity and access risks they introduce.
- Familiarity with non-human and agentic identities, AI service accounts, API key governance, and audit logging for automated systems.
- Applied knowledge of OWASP, NIST, CIS, SOC 2, and ISO 27001 concepts.
- Ability to operate autonomously, lead complex cross-functional efforts, and communicate security concepts to technical and non-technical stakeholders.
- Experience in high-growth or startup environments is preferred.
Benefits
- Competitive salary with equity and a 401(k) plan; the base salary range reflects multiple levels and leveling considers experience and interview performance.
- Comprehensive medical, dental, and vision benefits.
- Daily lunch and dinner through Forkable for in-office team members.
- Pre-tax commuter benefits for public transit, rideshares, and parking.
- Company-wide orientation and learning and development opportunities with regular 360-degree review cycles.
- Quarterly budgets for team and company outings.
- Flexible paid time off with no annual limit, sick days, and 11 company holidays.
- Twelve weeks of fully paid baby bonding leave for birthing and non-birthing parents.
- Remote work is fully supported; offices are located in New York City and San Francisco.
Tech Stack
Categories
About Valon Tech
Valon builds an AI-native operating system for mortgage servicing that unifies workflows, data, and money movement in a single system of record. It sells software to mortgage servicers and regulated financial institutions to manage compliant servicing and customer communications at scale. Founded in 2019 and headquartered in New York City, the platform has over $100 billion in mortgages on it.