Sr. Security Engineer – IAM

Levi Strauss & Co.; Ciudad de México; Híbrido; MXN 900.000 - 1.500.000; Jornada completa

Descripción de la vacante

Levi Strauss & Co. is seeking a Senior Identity Security Engineer to design, implement, and continuously improve its IAM ecosystem in a global hybrid environment.

You will lead identity lifecycle, authentication, governance, and privileged access initiatives across multiple teams, leveraging Microsoft Entra ID, MFA, passwordless auth, and Graph integrations. You will collaborate with HR, security, and cloud teams, develop automation in PowerShell and Python, and provide technical leadership for

Formación

• 8+ years of IAM, PAM, IGA or related cybersecurity engineering experience.
• Hands-on with Microsoft Entra ID, MFA, passwordless authentication, Conditional Access, SSO, PIM, Defender for Identity, Graph.
• Strong knowledge of identity protocols (SAML, OIDC, OAuth, SCIM, Kerberos, LDAP) and modern authentication flows.
• Experience with enterprise PAM platforms (Delinea, CyberArk) and IGA solutions like Saviynt, SailPoint, or MS Identity Governance.
• Strong scripting/automation with PowerShell, Python, Microsoft Graph, REST APIs.

Responsabilidades

• Lead design, implementation, and improvement of IAM capabilities: identity lifecycle, authentication, authorization, federation, and governance controls.
• Engineer privileged access management for admins, vendors, service accounts, and non-human identities.
• Drive identity governance initiatives: access certs, role management, lifecycle workflows, and joiner/misher/leaver controls.
• Collaborate with HR, application, infrastructure, cloud, audit, and security teams to improve data quality and control effectiveness.
• Develop automation to improve identity operations, reporting, and evidence using PowerShell, Python, Graph, REST APIs.
• Provide technical guidance, review designs, document solutions, and promote secure engineering practices.

Conocimientos

Microsoft Entra ID

MFA

Passwordless authentication

Conditional Access

PIM

PowerShell

Python

Identity governance

Descripción del empleo

Calling all originals: At Levi Strauss & Co., you can be yourself — and be part of something bigger. We’re a company of people who like to forge our own path and leave the world better than we found it. Who believe that what makes us different makes us stronger. So add your voice. Make an impact. Find your fit — and your future. We are seeking a Senior Identity Security Engineer to help shape and evolve Levi Strauss & Co.'s Identity and Access Management ecosystem. Reporting to the Senior Manager, Perimeter Security, you'll work with modern identity technologies and partner across security, infrastructure, and business teams to deliver secure, scalable solutions across identity governance, privileged access, authentication, automation, and access management in a global hybrid environment. This is an opportunity to tackle complex challenges, influence the future of identity security at LSCo., and make a meaningful impact across the enterprise. You will combine advanced hands-on engineering capability with strong technical judgment and extensive collaboration across Security, Infrastructure, Cloud Engineering, HR, Internal Audit, application, and business teams.

Responsibilities

Responsibilities include translating approved security strategies, architecture principles, compliance requirements, and business needs into scalable technical solutions and measurable improvements in identity-related risk. You will independently lead assigned identity engineering initiatives, recommends technical improvements, and coordinates implementation across multiple teams.

About the Job

Lead the design, implementation, and continuous improvement of assigned IAM capabilities, including identity lifecycle, authentication, authorization, federation, privileged access, and governance controls. Translate approved security strategies, architecture principles, control requirements, and business needs into scalable technical designs and implementation plans. Lead the design, implementation, and continuous improvement of Microsoft identity services, including Microsoft Entra ID, MFA, passwordless authentication, Conditional Access, SSO, OATH, PIM, JIT access, Defender for Identity, and Microsoft Graph-based integrations. Engineer Privileged Access Management capabilities for administrative users, vendors, service accounts, non-human identities, session controls, credential vaulting, privileged elevation, credential rotation, and privileged remote access use cases. Lead Identity Governance and Administration engineering initiatives, including access certifications, birthright provisioning, role management, segregation of duties, lifecycle workflows, joiner/mover/leaver controls, and policy-based governance. Partner with HR, application, infrastructure, cloud, audit, and security teams to improve authoritative identity data quality, attribute mapping, lifecycle triggers, provisioning, deprovisioning, and control effectiveness. Lead technical discussions across security and technology teams, communicate solution options and tradeoffs, build stakeholder alignment, and coordinate implementation across affected teams. Develop automation solutions using PowerShell, Python, Microsoft Graph, REST APIs, and platform connectors to improve identity operations, governance, reporting, and control evidence. Integrate identity platforms with enterprise applications, cloud platforms, SaaS services, PAM tools, IGA systems, SIEM/SOAR tooling, endpoint platforms, and security operations processes. Independently lead complex production troubleshooting, root-cause analysis, incident response support, and escalation resolution for identity-related issues across hybrid and cloud environments. Establish technical metrics, service health indicators, control evidence, and operational reporting to demonstrate delivery outcomes, control effectiveness, operational maturity, and risk reduction for assigned capabilities and initiatives. Provide technical guidance to engineers and analysts, review designs, maintain documentation, and promote secure, reusable engineering practices.

About You

You are curious, collaborative, and passionate about identity security. You enjoy solving complex challenges, improving how security services operate, and working with teams across the organization to deliver secure, reliable, and scalable solutions that support the business. The ideal candidate will bring a combination of technical expertise, engineering leadership, and experience in the following areas:

• 8+ years of relevant experience in IAM, PAM, IGA, authentication, authorization, identity lifecycle management, or related cybersecurity engineering disciplines.
• Advanced hands-on experience with Microsoft Entra ID, MFA, passwordless authentication, Conditional Access, SSO, PIM, JIT administration, Microsoft Defender for Identity, and Microsoft Graph.
• Deep understanding of identity and access protocols including SAML, OIDC, OAuth, SCIM, Kerberos, LDAP, certificate-based authentication, and modern authentication flows.
• Hands-on experience with enterprise PAM platforms such as Delinea, CyberArk, or comparable solutions, including privileged access and least-privilege controls.
• Experience implementing or administering enterprise IGA solutions such as Saviynt, SailPoint, Microsoft Identity Governance, or comparable platforms.
• Strong scripting and automation experience using PowerShell or Python, Microsoft Graph, REST APIs, and platform-native automation capabilities.
• Demonstrated experience leading complex identity engineering initiatives across multiple technical teams and business functions.
• Strong communication, stakeholder management, and technical leadership skills with accountability for delivering sustainable engineering outcomes.

We are an Equal Opportunity Employer committed to empowering individuals from all walks of life to achieve their professional goals with us, regardless of race, religion, gender, gender identity, pregnancy, disability, sexual orientation, age, national origin, citizenship status, or genetic information. We actively seek and encourage applications from diverse candidates, including those with disabilities, and offer accommodations throughout the selection process upon request. To ensure that our products and culture continue to incorporate everyone's perspectives and experience, we never discriminate based on race, religion, national origin, gender identity or expression, sexual orientation, age, or marital, veteran, or disability status.

LOCATION Mexico, D.F., Mexico FULL TIME/PART TIME Full time

Our common thread: We're originals. From day one, we've been doing it our way — creating our own drumbeat and building something that's different from the rest. That's why we're looking for people who are excited about finding their career fit and transforming the future. Because at Levi Strauss & Co., you can do what you love while staying true to who you are.