Principal Authentication Engineer (IAM) — Vice President
$150,000–$150,000 year
On-siteNew York, United States
Job Summary
Design, build, and ship secure, scalable authentication solutions for human and non-human identities across hybrid environments. Implement and harden OIDC/OAuth2, SAML, SSO, FIDO2/WebAuthn, PKI, and API auth while integrating platforms like Entra ID, Ping Identity, SailPoint, CyberArk, HashiCorp Vault, and HSMs. Operate large-scale IAM estates with high availability, disaster recovery, and automation using Terraform, Ansible, and CI/CD pipelines. Define identity lifecycle policies, enforce governance controls, and assess technical debt to deliver remediation plans. Translate complex architectures into executable work through epics, runbooks, and audit-ready documentation. Partner with product teams to drive adoption and lead incident response.
Required Qualifications
- Hands-On Principal Engineer (not architect-only)
- Deep authentication expertise: OIDC/OAuth2, SAML, SSO, FIDO2/WebAuthn, PKI (CA/RA, mTLS, cert lifecycle), API auth (JWT/mTLS), and Unix/Linux authentication at enterprise scale
- IAM platforms & integration mastery: experience with HashiCorp Vault, HSMs, CyberArk, SailPoint, Entra ID, Ping Identity, IDM/LDAP, and RCBI—covering policy design, integration, automation, and migrations
- Resiliency and Automation at Scale: proven experience operating IAM/auth services across large, globally distributed environments with multi-region HA/DR, performance tuning, IaC (Terraform), config management (Ansible/Puppet/Chef), CI/CD, observability
- strong Shell plus Python/Go
- Security & compliance acumen: threat modeling, least privilege, PAM, secrets management, policy-as-code, and auditability for human and non-human identities (including agentic systems)
- Systems integrator mindset: ability to customize and stitch vendor products and open standards into cohesive, well-documented solutions and APIs
- Team enablement & communication: skill in decomposing solutions into clear epics/stories, authoring ADRs/runbooks/standards, conducting reviews, coaching engineers/SREs, and producing clear written documentation to influence stakeholders in an agile squad model
- Enterprise & industry savvy: experience navigating large-institution environments; influencing roadmaps; driving adoption of controls and best practices; typically 10+ years in IAM engineering within complex, global settings
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.