Identity Security Engineering Leader

GEICO; Richardson (TX); On-site; USD 140,000 - 300,000; Full time

Benefits offered by this job

GEICO Pledge

Job summary

GEICO is seeking an Identity Security Distinguished Engineer to lead strategic direction for IAM across user, development and production domains. You will oversee a team of engineers delivering secure IAM configurations, threat detection, and automated control validation.

The role emphasizes modernization, secure-by-design practices, and collaboration with security peers to enable business growth. The ideal candidate combines deep IAM expertise with an attacker/defender mindset, hands-on

Qualifications

• Extensive experience with identity products and protocols (Active Directory, Kerberos, LDAP, SAML, SCIM, OAuth, OIDC).
• Deep skills in privileged access management tools and services (build/buy).
• Experience in offensive and defensive security roles with a hacker mindset.
• Experience designing security systems with microservices and extensible REST APIs.
• Strong communication and ability to influence stakeholders.
• Experience across Linux, Mac, Windows in multi-platform environments.
• Experience with multiple IaaS platforms.
• Proven ability to implement security controls with engineering approaches.
• Ability to thrive in a fast-paced, startup-like environment.
• Knowledge of ITDR, EPM, MITRE, CIS and NIST frameworks.
• Fluency with Python or Go; cryptographic protocols and TLS, AES knowledge.
• Experience working with auditors and demonstrating security controls.

Responsibilities

• Lead security strategy and technical direction for IAM across user, development and production domains.
• Provide technical guidance and mentorship to engineers, fostering innovation and collaboration.
• Collaborate with cross-functional teams to solve complex problems with minimal business impact.
• Deliver automation initiatives and proofs of concept to enhance security capabilities.
• Develop automated controls and governance tooling to meet regulatory requirements.
• Work with business partners to validate threat mitigations and compliance.
• Define roadmaps for securing identities with minimal overhead.
• Perform automated adversarial testing of identity systems to ensure effective detection.

Skills

Identity platforms

Authentication protocols

Python or Go

Security automation

Threat detection

Education

Bachelor's degree in Computer Science or equivalent

Penetration testing / security certifications

Tools

AWS

GCP

Azure

Job description

GEICO is seeking an Identity Security Distinguished Engineer to lead strategic direction for IAM across user, development and production domains. You will oversee a team of engineers delivering secure IAM configurations, threat detection, and automated control validation.

The role emphasizes modernization, secure-by-design practices, and collaboration with security peers to enable business growth. The ideal candidate combines deep IAM expertise with an attacker/defender mindset, hands-on