IAM Security Engineering Lead

GEICO; Bethesda (MD); Hybrid; USD 140,000 - 300,000; Full time

Job summary

GEICO is seeking an Identity Security Distinguished Engineer to guide security strategy and technical direction for IAM across user, development, and production domains. You will lead a team delivering automated IAM controls, threat detection, and compliance automation while aligning initiatives with business priorities.

The role demands deep expertise in identity protocols, privileged access management, and secure architecture across Linux, Windows, and cloud environments.

Qualifications

• Extensive experience in identity products and protocols (AD, Kerberos, LDAP, SAML, SCIM, OAuth and OIDC).
• Strong background in privileged access management and secure IAM architectures.
• Experience with design/architecture of security systems using micro-services and REST APIs.

Responsibilities

• Lead security strategy and technical direction for identity and access management within GEICO.
• Drive modernization and automate testing of IAM controls and compliance activities.
• Mentor engineers, collaborate with cross-functional teams, and influence security decisions at all levels.
• Define roadmaps for securing identities with minimal business impact and drive threat detection improvements.
• Provide demonstrations of security value and align security initiatives with business goals.

Skills

Identity products

Identity protocols

Active Directory

Kerberos

LDAP

SAML

OAuth

OIDC

Privileged access management

Python

Go

AWS

GCP

Azure

REST APIs

Microservices

Cryptography

Education

Bachelor's degree in Computer Science or Cyber Security

Tools

Python

Go

Job description

GEICO is seeking an Identity Security Distinguished Engineer to guide security strategy and technical direction for IAM across user, development, and production domains. You will lead a team delivering automated IAM controls, threat detection, and compliance automation while aligning initiatives with business priorities.

The role demands deep expertise in identity protocols, privileged access management, and secure architecture across Linux, Windows, and cloud environments.