FDE Security & Identity Engineer - USA

Inviso; United States; On-site; USD 124,000 - 190,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) with company match

Training reimbursement

Paid time off

Paid holidays

Job summary

Inviso is seeking a remote FDE Security & Identity Engineer to join our delivery team, supporting client product, engineering, security and business stakeholders to design and secure an enterprise AI platform.

The role emphasizes threat modeling, tenant isolation, identity and authorization, secure delivery practices and compliance-by-design, working hands-on with client teams to ensure security-by-default. Travel may be required for client needs.

Qualifications

• Experience designing and securing production software platforms, preferably in multi-tenant or regulated environments.
• Strong understanding of authentication, authorization, token exchange, and least-privilege access patterns.
• Experience defining or contributing to platform threat models and applying them to architecture and delivery decisions.
• Ability to design tenant isolation models across control, data, and application boundaries.
• Experience securing systems that execute untrusted content, code, tools, or agent actions.
• Familiarity with secure CI/CD practices including secrets management, scanning, policy enforcement, and secure release controls.
• Ability to support compliance-by-design with controls, evidence, data handling, and security documentation.
• Strong communication skills with engineers, product leaders, client stakeholders, and customer security teams.
• Pragmatic judgment balancing security, speed, reliability, and business value.
• Interest in responsible AI and secure AI systems and workflows.

Skills

Production security design

Authn/Authz concepts

Threat modeling

Tenant isolation

Untrusted content security

CI/CD security

Compliance-by-design

Communication

Security judgement

Responsible AI security

Job description

FDE Security & Identity Engineer

This is a remote, client-facing consultant role with Inviso. In this position, you will support an external software development organization as part of Inviso’s delivery team, working closely with client product, engineering, security, and business stakeholders.

The Inviso Security & Identity Engineer is responsible for helping design, secure, and deliver the foundations of an enterprise AI platform used in mission-critical transportation and operational technology environments. This role focuses on threat modeling, tenant isolation, identity, authorization, secure delivery practices, and compliance-by-design.

You will work with client teams to make sure the platform is safe by construction, with security decisions built into the architecture rather than added after the fact. The ideal candidate is hands-on, pragmatic, collaborative, and able to explain complex security concepts clearly to technical and non-technical stakeholders.

This is a 100% remote role, but may require some travel due to client needs.

Experience & Skills Required

• Experience designing and securing production software platforms, preferably in multi-tenant or regulated environments.
• Strong understanding of authentication, authorization, delegated access, token exchange, service identity, and least-privilege access patterns.
• Experience defining or contributing to platform threat models and applying them to architecture, engineering, and delivery decisions.
• Ability to design and review tenant isolation models across control plane, data plane, application, and infrastructure boundaries.
• Experience securing systems that execute untrusted content, code, tools, or agent actions.
• Familiarity with secure CI/CD practices including secrets management, scanning, policy enforcement, and secure release controls.
• Ability to support compliance-by-design practices including controls, evidence, data handling, and security documentation.
• Strong communication skills and ability to partner with engineers, product leaders, client stakeholders, and customer security teams.
• Pragmatic judgment with the ability to balance security, speed, reliability, and business value.
• Interest in responsible AI, secure AI systems, and controls for model, agent, and tool-based workflows.

Desired Qualifications

• Experience designing authentication and authorization for a multi-tenant SaaS or platform environment.
• Deep familiarity with OAuth, OIDC, SAML, Entra ID, cloud IAM, or related identity technologies.
• Experience with SOC 2, ISO 27001, GDPR, or similar compliance frameworks.
• Experience securing AI, LLM, RAG, agentic, or tool-calling systems.
• Experience with enterprise-scale software, regulated delivery environments, or mission-critical systems.
• Experience using AI-assisted development tools while maintaining strong review and security discipline.

Success Criteria

Success in this role is measured by the quality of secure architecture decisions, the strength of tenant isolation and identity patterns, the practicality of security guidance, and the ability to help client teams ship reliable, compliant, and secure platform capabilities. This role is expected to raise the security bar while enabling delivery teams to move quickly and responsibly.

Benefits

At Inviso, we believe great talent should be rewarded with competitive pay, meaningful benefits, and room to grow. The base pay for this role ranges from $124,000 to $190,000 annually, reflecting the cost of labor across multiple US geographic markets. Actual compensation will be determined by factors such as location, job-related skills, experience, education or training, and the needs of Inviso’s different lines of business. Beyond base pay, we offer a strong benefits package that includes medical, dental, and vision insurance, a 401(k) plan with company match, annual training reimbursement, paid time off, paid holidays, and additional perks designed to support your well-being and long-term success.

Why Inviso?

• Our Culture & Values are who we are.
• Our commitment to excellence is interwoven with the way we care about our people. Our low attrition rate, high average employee tenure, and the number of people that have been with Inviso for 10, 15, even 20 years, speaks volumes to who we are as a company.
• We are a meritocracy through and through. Those who excel, grow. There is no ceiling, we don’t tolerate politics.
• Inviso has maintained a deep, well-established relationship with Microsoft for over 20 years. We are a top-rated supplier and are proud to be a Managed Partner with many credentials.