Senior Identity Engineer
$110,000–$160,000 year
RemoteBoston, Massachusetts, United States
Job Summary
Assess and continuously improve Later's security posture across applications, infrastructure, and development workflows by defining scalable standards and guardrails. Own identity and access management, including authentication, authorization, and secure machine-to-machine processes, while hardening login systems and establishing consistent patterns. Embed security controls into CI/CD pipelines through SAST, DAST, SCA, container scanning, and secret management, partnering with engineering teams to identify vulnerabilities and drive remediation. Provide pragmatic guidance during architecture reviews, translating complex concepts into actionable recommendations for technical and non-technical stakeholders. Lead by influence to raise the security bar through standards, tooling, and mentorship, ensuring compliance frameworks like SOC 2 and ISO 27001 are supported through automation.
Required Qualifications
- 5–7+ years of experience as a Security Engineer or Software Engineer with a strong security focus
- Proven experience building and operating production-grade software, systems, or internal tooling
- Strong background in application security, infrastructure security, and secure CI/CD practices
- Hands-on experience with identity and access management, including authentication systems, authorization frameworks, and machine-to-machine security patterns
- Experience applying security frameworks such as OWASP, NIST, or CIS Controls in real-world production environments
- Familiarity with cloud security tooling (AWS Security Hub, Azure Security Center, or GCP Security Command Center), SIEM/SOAR tools, and Infrastructure-as-Code security scanning (Terraform, CloudFormation)
- Experience supporting compliance frameworks such as SOC 2 and ISO 27001
- Familiarity with modern backend systems (including C#) and cloud-native architectures
- Demonstrated ability to collaborate cross-functionally and influence engineering teams to improve security outcomes
- Strong communication skills with the ability to translate complex security concepts into clear, actionable guidance
- #LI-Hybrid
Desired Qualifications
- Experience designing or migrating identity architecture at scale
- Experience building internal developer security tooling
- Experience working in a high-growth technology environment
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.