Identity Security Staff Engineer (IAM & Access)

GEICO; Palo Alto (CA); On-site; USD 110,000 - 230,000; Full time

Job summary

GEICO is seeking a Staff Engineer to partner with Distinguished Engineers to innovate and build secure identity systems. You will lead the execution of a technical IAM roadmap, ensuring authentication and communication security across the organization and delivering scalable, reliable security solutions.

Ideal candidates bring 4+ years in technology or identity engineering, deep IAM tooling knowledge, and hands-on experience with cloud platforms (AWS/GCP/Azure).

Qualifications

• Extensive experience in identity products and protocols such as Active Directory, Kerberos, LDAP, SAML, SCIM, OAuth, and OIDC.
• Deep skills in privileged access management tools and services (build/buy).
• Experience building and designing security systems with micro-services and REST APIs.
• Experience communicating and presenting to senior and junior staff with the ability to influence stakeholders.
• Experience in a multi-platform environment with Linux, Mac, Windows.
• Experience with multiple IaaS platforms from top tier providers.
• Experience with solving security control requirements with engineering approaches.
• Ability to excel in a fast-paced, startup-like environment.
• Ability to design, perform experiments, and influence security detection and protection solutions.
• Strong knowledge of IAM security tools and services such as IGA, PAM, JIT access, ITDR, NHI, EPM, etc.
• Strong knowledge of MITRE, CIS and NIST frameworks.
• Fluency in at least one modern language such as Python or Go.
• Experience working with auditors and demonstrating security controls

Responsibilities

• Collaborate with product managers, team members, customers, and other engineering teams to solve our toughest problems
• Develop and execute technical IAM strategies across all Identity-related security services and systems, while optimizing for performance and efficiency
• Own accountability for the quality, usability, and performance of the solutions
• Consistently share best practices and improve processes within and across teams
• Take on-call and operational support

Skills

Identity engineering

IAM security

Active Directory

Kerberos

OAuth

OIDC

Microservices

REST APIs

Python

Go

AWS

GCP

Azure

Security tooling

Education

Bachelor's degree in computer science

Tools

PAM

Job description

GEICO is seeking a Staff Engineer to partner with Distinguished Engineers to innovate and build secure identity systems. You will lead the execution of a technical IAM roadmap, ensuring authentication and communication security across the organization and delivering scalable, reliable security solutions.

Ideal candidates bring 4+ years in technology or identity engineering, deep IAM tooling knowledge, and hands-on experience with cloud platforms (AWS/GCP/Azure).