Senior Identity Engineer
$145,000–$175,000 year
HybridChicago, Illinois, United States
Job Summary
Assess and continuously improve Later's security posture across applications, infrastructure, and development workflows. Own identity and access management, including authentication, authorization, and secure machine-to-machine processes, while designing and maintaining secure authentication systems for internal and customer-facing experiences. Embed security controls into CI/CD pipelines by implementing SAST, DAST, SCA, container scanning, and secret management to reduce manual effort and improve detection. Partner with engineering teams to identify vulnerabilities, communicate risk, and drive remediation, translating complex security concepts into actionable guidance for both technical and non-technical stakeholders. Lead by influence through standards, tooling, and mentorship to raise the security bar while maintaining speed of product delivery.
Required Qualifications
- 5–7+ years of experience as a Security Engineer or Software Engineer with a strong security focus
- Proven experience building and operating production-grade software, systems, or internal tooling
- Strong background in application security, infrastructure security, and secure CI/CD practices
- Hands-on experience with identity and access management, including authentication systems, authorization frameworks, and machine-to-machine security patterns
- Experience applying security frameworks such as OWASP, NIST, or CIS Controls in real-world production environments
- Familiarity with cloud security tooling (AWS Security Hub, Azure Security Center, or GCP Security Command Center), SIEM/SOAR tools, and Infrastructure-as-Code security scanning (Terraform, CloudFormation)
- Experience supporting compliance frameworks such as SOC 2 and ISO 27001
- Familiarity with modern backend systems (including C#) and cloud-native architectures
- Demonstrated ability to collaborate cross-functionally and influence engineering teams to improve security outcomes
- Strong communication skills with the ability to translate complex security concepts into clear, actionable guidance
- #LI-Hybrid
- We have offices in Boston, MA; Vancouver, BC; and Vancouver, WA. For select positions, we are open to hiring fully remote candidates.
Desired Qualifications
- Experience designing or migrating identity architecture at scale
- Experience building internal developer security tooling
- Experience working in a high-growth technology environment
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.