Remote Senior IAM Engineer - Identity & Access Security

Valon Tech; United States; Remote; USD 150,000 - 230,000; Full time

Job summary

Valon seeks a Senior Security Engineer, Identity & Access Management to own the design, implementation, and operation of Valon’s IAM stack for the workforce and customer-facing authentication within ValonOS. You’ll be the connective tissue between IT, Engineering, and Security, ensuring identity governance across systems.

You will manage IdP (SSO, MFA, conditional access, directory sync), enforce least-privilege access, and collaborate across Product, Compliance, Legal, and Security to mitigate

Qualifications

• 5+ years in security engineering roles with a core focus on identity and access management
• Bachelor's degree in Information Security, Computer Science, Technology or related field
• Relevant security certifications (e.g., CISSP, CISM, CCSK, CCSP or similar)
• Hands-on experience with an enterprise IdP (Okta, Entra ID, or Google Workspace) including SSO, MFA
• Deep understanding of authentication and authorization models across applications - SAML, OIDC/OAuth 2.0, RBAC, ABAC, and API access controls
• Hands-on experience with modern identity security technologies and tooling

Responsibilities

• Design and support end-to-end lifecycle of workforce identity systems including identity automation, access management, and least-privilege enforcement across internal systems
• Support design of secure identity design patterns for product teams building on ValonOS
• Manage and evolve Valon's IdP in conjunction with IT including SSO integrations, MFA policies, conditional access rules, and directory synchronization
• Define and enforce RBAC and group-based access policies for internal applications, cloud environments, and development tooling
• Support privileged access management (PAM) for internal infrastructure in conjunction with Engineering teams
• Design and build AI-assisted workflows that automate and accelerate core IAM operations
• Evaluate AI risks across IAM pipelines, ensuring appropriate security controls around data exposure, prompt injection and other threats
• Collaborate with Product, Engineering, Data, Compliance, Legal, and other teams to identify and drive mitigation for data security risks
• Support other operational and on-call duties such as vulnerability management, regulatory compliance (SOC 2, CCPA, NYDFS, FTC), policy development, incident response and security reviews.

Skills

Identity & Access Management

SAML 2.0

OIDC/OAuth 2.0

SCIM

LDAP

SSO

MFA

RBAC

ABAC

PAM solutions

Education

Bachelor's degree in Information Security, Computer Science, Technology or related field

CISSP, CISM, CCSK, CCSP or similar certifications

Tools

Okta

Entra ID / Azure AD

Google Workspace

SCIM provisioning

Job description

Valon seeks a Senior Security Engineer, Identity & Access Management to own the design, implementation, and operation of Valon’s IAM stack for the workforce and customer-facing authentication within ValonOS. You’ll be the connective tissue between IT, Engineering, and Security, ensuring identity governance across systems.

You will manage IdP (SSO, MFA, conditional access, directory sync), enforce least-privilege access, and collaborate across Product, Compliance, Legal, and Security to mitigate