Senior Identity & Access Security Engineer (IAM)

Open Door Inc.; Toronto; On-site; CAD 140,000 - 180,000; Full time

Job summary

Opendoor is seeking a security engineer to own the identity platform and authentication strategy across employees and contractors. You will design and implement the platform that decides access and write code to enforce policies.

You will work with Okta + WebAuthn, IAM as code, and build first-party tooling to automate provisioning, access governance, and incident response. This role emphasizes autonomy and impact. The Toronto-based role requires in-office collaboration four days a week.

Qualifications

• Experience designing and operating a workforce identity platform at enterprise scale.
• Hands-on Okta engineering and automation experience.
• Proficiency with Terraform and IaC for identity systems.
• Strong background in Python, Go or TypeScript.

Responsibilities

• Own identity control plane end-to-end, aligning with enterprise security surface owners.
• Define enrollment rules for authentication methods and set assurance bar.
• Design authenticator tiers and tune session policy and re-authentication.
• Build per-application authentication policies considering device posture and risk signals.
• Own non-human identities and short-lived, federated credentials with automatic expiry.
• Contribute to first-party tooling for provisioning, access governance, and integrations.
• Mentor engineers on identity patterns and guardrails.

Skills

AI automation

Okta engineering

Python/Go/TS

IAM platform

Terraform IaC

SAML/OIDC/SCIM

Tools

Google Workspace

Terraform

Okta

GitHub

WebAuthn

Job description

Opendoor is seeking a security engineer to own the identity platform and authentication strategy across employees and contractors. You will design and implement the platform that decides access and write code to enforce policies.

You will work with Okta + WebAuthn, IAM as code, and build first-party tooling to automate provisioning, access governance, and incident response. This role emphasizes autonomy and impact. The Toronto-based role requires in-office collaboration four days a week.