Identity Security Architect & Engineering Lead

GEICO; Palo Alto (CA); On-site; USD 140,000 - 300,000; Full time

Job summary

GEICO is seeking an Identity Security Distinguished Engineer to provide security-focused strategic and technical direction for IAM across user, development, and production domains. You will lead a team of engineers delivering secure IAM configurations, threat detection, and automated controls validation.

The role focuses on offensive and defensive security, governance automation, and modernizing identity strategy within a rapid, business-driven environment.

Qualifications

• Extensive experience in identity products and protocols (AD, Kerberos, LDAP, SAML, OAuth, OIDC).
• Strong hacker mindset in offensive and defensive security roles.
• Experience designing secure architectures with microservices and REST APIs.
• Excellent communication with senior/junior staff and stakeholders.
• Multi-platform experience: Linux, macOS, Windows.
• Experience with multiple IaaS platforms (AWS, GCP, Azure).
• Ability to work in fast-paced environments.
• Knowledge of ITDR, MITRE, CIS, NIST.
• Proficiency in Python or Go.
• Crypto and TLS/AES knowledge.
• Experience with auditors and security controls.

Responsibilities

• Lead security strategy for identity and access management.
• Provide technical guidance and mentorship to the team.
• Collaborate with IAM and security teams to solve problems with minimal business impact.
• Deliver automation to ensure compliance with regulations.
• Develop proofs of concept to enhance security capabilities.
• Define roadmaps for securing identities with minimal overhead.
• Automated adversarial testing of identity systems.
• Communicate security value to the business and stakeholders.

Skills

Active Directory

Kerberos

LDAP

SAML

OAuth

OIDC

Privileged access mgmt

Offensive security

Python

Go

AWS

GCP

Azure

Docker

Kubernetes

Education

Bachelor's degree in CS or related field

Penetration testing certifications

Tools

AWS

GCP

Azure

Docker

Kubernetes

Job description

GEICO is seeking an Identity Security Distinguished Engineer to provide security-focused strategic and technical direction for IAM across user, development, and production domains. You will lead a team of engineers delivering secure IAM configurations, threat detection, and automated controls validation.

The role focuses on offensive and defensive security, governance automation, and modernizing identity strategy within a rapid, business-driven environment.