Senior Identity Engineer

VL Employment LLC; Colorado; Hybrid; USD 120,000 - 142,000; Full time

Benefits offered by this job

Remote-friendly environment

Career development & coaching

Competitive total rewards & benefits

Enterprise-scale identity projects

Collaborative team environment

Job summary

Veralto is seeking a Senior Identity Engineer to design, implement, and automate enterprise IAM solutions. You will build integrations between Microsoft Entra ID, Active Directory, HR systems, and applications while driving identity governance and privileged access management initiatives.

Join a collaborative team focused on continuous improvement, security, and automation. The role requires onsite training for two weeks, with a flexible, remote-friendly work environment and competitive total

Qualifications

• 5+ years of experience supporting enterprise IAM, Microsoft Entra ID, Active Directory, or related identity technologies.
• Strong PowerShell scripting skills with automation experience.
• Experience troubleshooting authentication, authorization, provisioning, identity lifecycle, and access-related issues.
• Understanding of SAML, OAuth, OpenID Connect (OIDC), LDAP, Kerberos, and related identity concepts.
• Experience translating business requirements into secure, scalable technical solutions.

Responsibilities

• Design, implement, and continuously improve enterprise IAM/IDAM solutions.
• Build and maintain integrations between Entra ID, AD, HR systems, apps, and identity platforms.
• Develop automation to improve reliability, consistency, and efficiency.
• Troubleshoot complex identity lifecycle issues and governance challenges.
• Collaborate with Information Security to implement least privilege and PAM practices.
• Lead or contribute to identity migrations, mergers, and modernization initiatives.

Skills

IAM

Microsoft Entra ID

Active Directory

PowerShell scripting

Authentication protocols

Troubleshooting

Governance & security

Tools

Saviynt PAM

Microsoft Graph

Git

Job description

Imagine yourself… Designing and securing identity services that enable more than 18,000 associates worldwide to access the resources they need—securely and efficiently. Expanding your expertise through complex identity engineering challenges, automation, and modern authentication technologies. Collaborating with Infrastructure, Information Security, HR, Messaging, Service Desk, and global IT teams to deliver secure and scalable solutions. Growing your career as part of a highly collaborative team focused on continuous improvement, innovation, and security At Veralto, our purpose—Safeguarding the World’s Most Vital Resources™—drives everything we do. Whether we’re helping protect global water supplies or supporting the delivery of essential products around the world, technology plays a critical role in enabling our business and our people. When you join Veralto, you become part of a global network of associates working together to solve meaningful challenges while continuing to learn, grow, and make an impact every day.

We offer:

• A flexible, remote-friendly work environment
• Ongoing investment in your career through training, development, and coaching
• Competitive total rewards and wellbeing programs
• The opportunity to work on enterprise-scale identity technologies that support a global workforce
• A collaborative team environment that values continuous learning and improvement

About the Role Identity is a foundational service that enables secure access across Veralto. As a Senior Identity Engineer, you will help design, build, automate, and secure the identity services that enable more than 18,000 associates worldwide to access the right resources at the right time—while protecting the business through strong governance and security. This role goes beyond administering identity platforms. You'll engineer scalable identity solutions, automate business processes, troubleshoot complex technical challenges, and continuously improve how identity is managed across the enterprise. As part of a small, highly collaborative Identity Engineering team, you'll partner with Corporate Infrastructure, Information Security, HR, Messaging, the Global Service Desk, application owners, and IT teams across Veralto's Operating Companies to deliver secure, scalable identity solutions and support Identity Governance and Privileged Access Management initiatives.

In this role, a typical day will look like:

• Designing, implementing, and continuously improving enterprise Identity and Access Management (IAM) solutions.
• Building and maintaining integrations between Microsoft Entra ID, Active Directory, HR systems, enterprise applications, and identity platforms.
• Developing automation using PowerShell and related technologies to improve reliability, consistency, and operational efficiency.
• Troubleshooting complex authentication, authorization, provisioning, and identity lifecycle issues using a structured root-cause-driven approach.
• Partnering with Information Security to implement identity governance, least privilege, and privileged access best practices.
• Collaborating with business stakeholders to translate identity-related business requirements into secure, scalable technical solutions.
• Leading or contributing to identity-related migrations, acquisitions, and modernization initiatives.
• Serving as a technical escalation point for complex identity issues and driving long-term solutions through root cause analysis.
• Documenting solutions, mentoring peers, and contributing to a culture of continuous improvement through engineering and automation.

The essential requirements of the job include:

• 5+ years of experience supporting enterprise Identity and Access Management (IAM), Microsoft Entra ID, Active Directory, or related identity technologies.
• Strong PowerShell scripting skills with experience building automation and improving operational processes.
• Experience troubleshooting authentication, authorization, provisioning, identity lifecycle, and access-related issues.
• Understanding of identity and authentication technologies including SAML, OAuth, OpenID Connect (OIDC), LDAP, Kerberos, and related identity concepts.
• Experience translating business requirements into secure, scalable technical solutions.

Preferred Qualifications:

• Identity Governance and Administration (IGA) platforms, preferably Saviynt Privileged Access Management (PAM) solutions
• Microsoft Graph and Microsoft Graph PowerShell SDK
• Git or other source control systems
• Microsoft 5/6 365 administration
• Enterprise automation and workflow orchestration
• Identity migrations, mergers & acquisitions, or enterprise integration projects
• ITIL or operational service management practices

Note: For this role it will be required to be onsite for the first two weeks for training.

With annual sales of $5.5 billion, Veralto is a global leader in essential technology solutions. Our operating companies help manage, treat, purify, and protect the world's water resources while supporting product quality, traceability, and essential goods across global supply chains.

Joining Veralto means joining a company where purpose meets possibility—and where your work contributes to a safer, cleaner, and more sustainable future.

US ONLY: The below range reflects the range of possible compensation for this role at the time of this posting. We may ultimately pay more or less than the posted range. This range may be modified in the future. An associate’s position within the salary range will be based on several factors, including, but not limited to, relevant education, qualifications, certifications, experience, skills, seniority, geographic location, performance, shift, travel requirements, sales or revenue-based metrics, any collective bargaining agreements, and business or organizational needs.

The compensation range for this role is $120,000 - $142,000 USD per year.

We offer a comprehensive package of benefits including paid time off, medical/dental/vision insurance and 401(k) to eligible employees.

Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, benefits or any other form of compensation and benefits that are allocable to a particular employee remains in the Company's sole discretion unless and until paid and may be modified at the Company’s sole discretion, consistent with the law.

US residents: In any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information.

Veralto Corporation and all Veralto Companies are committed to equal opportunity regardless of race, color, national origin, religion, sex, age, marital status, disability, veteran status, sexual orientation, gender identity, or other characteristics protected by law. We value diversity and the existence of similarities and differences, both visible and not, found in our workforce, workplace and throughout the markets we serve. Our associates, customers and shareholders contribute unique and different perspectives as a result of these diverse attributes. The EEO posters are available here.

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform crucial job functions, and to receive other benefits and privileges of employment. Please contact us at [e-mail] to request accommodation.

Unsolicited Assistance We do not accept unsolicited assistance from any headhunters or recruitment firms for any of our job openings. All resumes or profiles submitted by search firms to any employee at any of the Veralto companies, in any form without a valid, signed search agreement in place for the specific position, approved by Talent Acquisition, will be deemed the sole property of Veralto and its companies. No fee will be paid in the event the candidate is hired by Veralto and its companies because of the unsolicited referral.

Thank you for your interest. Please read our Applicant Data Privacy Notice carefully here.