Base Salary
$140k - $160k/yr
Responsibilities
- Design the identity model for AI agents, including delegated on-behalf-of actions, composite identities, and audit attribution.
- Build a real-time authorization engine and help select policy technologies such as Cedar, OPA, or AuthZEN.
- Define trust models for identities issued by Microsoft Entra, Salesforce, and emerging agent identity standards.
- Build authorization and continuous-evaluation capabilities using live session and decision signals from existing identity products.
- Own the interfaces and contracts that other platform teams build against.
- Lead technical decisions across teams and establish technical direction for identity and authorization.
Requirements
- Typically 7 or more years of software engineering experience with deep expertise in identity, authorization, or distributed-systems security.
- Hands-on experience building authorization or policy systems using Cedar, OPA, OpenFGA, or a comparable engine.
- Working knowledge of OAuth, OpenID Connect, SPIFFE, SPIRE, or workload identity federation.
- Experience designing scalable systems and interfaces that other teams build on.
- Ability to lead technical decisions spanning multiple teams and communicate clearly with varied audiences.
- Preferred experience securing AI or agentic systems, contributing to identity, authorization, or security standards or open source, or working in privileged access, secrets management, or identity governance.
Benefits
- Competitive salary, meaningful bonus program, healthcare insurance, pension or retirement matching, comprehensive life insurance, employee assistance program, time off plans, and paid company holidays.
- Global, collaborative culture emphasizing innovation, respect, ownership, diversity, and career progression.
- Employment is contingent on a comprehensive criminal background check and verification of education and employment; publicly posted social media may also be reviewed.
About Delinea
Delinea helps organizations reduce identity-based risk while enabling secure, seamless access across the modern enterprise. As the identity security control plane, Delinea protects every human, machine, and AI identity with real-time, context-aware access. It replaces static privilege with just-in-time, policy-driven controls that maintain security without slowing down the business. Delinea continuously discovers identities, privileges, and access pathways, giving teams full visibility into who has access and why. With unified enforcement, automation, and auditing, organizations can apply least privilege consistently and move toward Zero Standing Privilege at their own pace, without requiring a rip-and-replace approach.