Senior Security Engineer, Identity & Access Management

Remotedxb; Dubai; On-site; AED 350,000 - 520,000; Full time

Job summary

Valon is building the AI-native operating system for regulated finance and is seeking a security engineer focused on identity and access management. Design, implement, and support end-to-end IAM workflows, manage the IdP (SSO, MFA policies), and enforce RBAC and ABAC across ValonOS.

Collaborate with Product, Engineering, Data, Compliance and Legal to mitigate data security risks, support vulnerability management and incident response, and evaluate AI risks across IAM pipelines, including data

Qualifications

• 5+ years in security engineering roles with a core focus on IAM.
• Bachelor's degree in Information Security, Computer Science, or related field.
• Security certifications such as CISSP, CISM, CCSK, or CCSP.

Responsibilities

• Design and support end-to-end lifecycle of workforce identity systems including identity automation and access management.
• Manage and evolve IdP including SSO integrations, MFA policies, and conditional access rules.
• Define and enforce RBAC and group-based access policies for internal applications and cloud environments.
• Support operational duties including vulnerability management, regulatory compliance, and incident response.

Skills

IAM security

Security engineering

RBAC/ABAC

IdP management

Education

Bachelor's degree in Information Security or CS

Tools

Okta

Entra ID

Google Workspace

Job description

About the Company

Valon is building the AI-native operating system for regulated finance, starting with mortgage servicing. We are a Series C company backed by a16z, transforming industries through our unified platform, ValonOS.

Responsibilities

• Design and support end-to-end lifecycle of workforce identity systems including identity automation and access management
• Support design of secure identity design patterns for product teams building on ValonOS
• Manage and evolve Valon's IdP including SSO integrations, MFA policies, and conditional access rules
• Define and enforce RBAC and group-based access policies for internal applications and cloud environments
• Support privileged access management (PAM) for internal infrastructure
• Design and build AI-assisted workflows to automate core IAM operations
• Evaluate AI risks across IAM pipelines, including data exposure and prompt injection
• Collaborate with Product, Engineering, Data, Compliance, and Legal teams to mitigate data security risks
• Support operational duties including vulnerability management, regulatory compliance, and incident response

Requirements

• 5+ years in security engineering roles with a core focus on IAM
• Bachelor's degree in Information Security, Computer Science, or related field
• Relevant security certifications such as CISSP, CISM, CCSK, or CCSP
• Hands‑on experience with enterprise IdP platforms like Okta, Entra ID, or Google Workspace
• Deep understanding of SAML, OIDC/OAuth 2.0, RBAC, ABAC, and API access controls
• Experience with modern identity security technologies and tooling

Preferred Qualifications

• Deep expertise in modern identity protocols: SAML 2.0, OIDC/OAuth 2.0, SCIM, and LDAP
• Solid background in cloud IAM (GCP preferred), including service accounts and workload identity federation
• Experience building AI/LLM-powered workflows in a security context
• Familiarity with securing non-human and agentic identities
• Applied knowledge of security frameworks like OWASP, NIST, CIS, and SOC 2
• Experience in high-growth or startup environments