Senior Identity Engineer

Veralto; Colorado; Hybrid; USD 120,000 - 142,000; Full time

Benefits offered by this job

Flexible remote-friendly

Career development

Wellbeing programs

Enterprise IAM work

Collaborative culture

Job summary

Veralto is seeking a Senior Identity Engineer to design, build, automate, and secure enterprise IAM services enabling 18,000+ associates worldwide. You will integrate Entra ID, AD, HR systems, and apps, while driving automation to improve reliability and efficiency.

This role emphasizes security governance and least privilege, with collaboration across Security and IT teams. You will also lead identity migrations and modernization initiatives, mentor peers, and contribute to a culture of

Qualifications

• 5+ years of experience in enterprise IAM, Entra ID, or Active Directory.
• Strong PowerShell scripting skills with automation focus.
• Experience troubleshooting authentication, authorization, provisioning, and identity lifecycle issues.
• Understanding of SAML, OAuth, OIDC, LDAP, Kerberos, and related identity concepts.
• Ability to translate business requirements into secure, scalable technical solutions.

Responsibilities

• Design, build, automate, and secure identity services for 18,000+ associates.
• Integrate Microsoft Entra ID, Active Directory, HR systems, and applications.
• Develop automation to improve reliability and efficiency.
• Troubleshoot complex identity issues using root-cause analysis.
• Collaborate with Information Security on governance and least privilege.

Skills

IAM

Entra ID

Active Directory

PowerShell

Automation

Tools

Saviynt

Git

Microsoft Graph PowerShell SDK

PAM

Job description

• Designing and securing identity services that enable more than 18,000 associates worldwide to access the resources they need—securely and efficiently.
• Expanding your expertise through complex identity engineering challenges, automation, and modern authentication technologies.
• Collaborating with Infrastructure, Information Security, HR, Messaging, Service Desk, and global IT teams to deliver secure and scalable solutions.
• Growing your career as part of a highly collaborative team focused on continuous improvement, innovation, and security.

• Designing and securing identity services that enable more than 18,000 associates worldwide to access the resources they need—securely and efficiently.
• Expanding your expertise through complex identity engineering challenges, automation, and modern authentication technologies.
• Collaborating with Infrastructure, Information Security, HR, Messaging, Service Desk, and global IT teams to deliver secure and scalable solutions.
• Growing your career as part of a highly collaborative team focused on continuous improvement, innovation, and security.

Imagine yourself…

At Veralto, our purpose—Safeguarding the World’s Most Vital Resources™—drives everything we do. Whether we’re helping protect global water supplies or supporting the delivery of essential products around the world, technology plays a critical role in enabling our business and our people.

When you join Veralto, you become part of a global network of associates working together to solve meaningful challenges while continuing to learn, grow, and make an impact every day.

We offer:

• A flexible, remote-friendly work environment
• Ongoing investment in your career through training, development, and coaching
• Competitive total rewards and wellbeing programs
• The opportunity to work on enterprise-scale identity technologies that support a global workforce
• A collaborative team environment that values continuous learning and improvement.

About The Role

Identity is a foundational service that enables secure access across Veralto. As a Senior Identity Engineer, you will help design, build, automate, and secure the identity services that enable more than 18,000 associates worldwide to access the right resources at the right time—while protecting the business through strong governance and security.

This role goes beyond administering identity platforms. You'll engineer scalable identity solutions, automate business processes, troubleshoot complex technical challenges, and continuously improve how identity is managed across the enterprise.

In this role, a typical day will look like:

• Designing, implementing, and continuously improving enterprise Identity and Access Management (IAM) solutions.
• Building and maintaining integrations between Microsoft Entra ID, Active Directory, HR systems, enterprise applications, and identity platforms.
• Developing automation using PowerShell and related technologies to improve reliability, consistency, and operational efficiency.
• Troubleshooting complex authentication, authorization, provisioning, and identity lifecycle issues using a structured root-cause-driven approach.
• Partnering with Information Security to implement identity governance, least privilege, and privileged access best practices.
• Collaborating with business stakeholders to translate identity‑related business requirements into secure, scalable technical solutions.
• Leading or contributing to identity‑related migrations, acquisitions, and modernization initiatives.
• Serving as a technical escalation point for complex identity issues and driving long‑term solutions through root cause analysis.
• Documenting solutions, mentoring peers, and contributing to a culture of continuous improvement through engineering and automation.

The essential requirements of the job include:

• 5+ years of experience supporting enterprise Identity and Access Management (IAM), Microsoft Entra ID, Active Directory, or related identity technologies.
• Strong PowerShell scripting skills with experience building automation and improving operational processes.
• Experience troubleshooting authentication, authorization, provisioning, identity lifecycle, and access‑related issues.
• Understanding of identity and authentication technologies including SAML, OAuth, OpenID Connect (OIDC), LDAP, Kerberos, and related identity concepts.
• Experience translating business requirements into secure, scalable technical solutions.

Preferred Qualifications

Experience with one or more of the following is preferred:

• Identity Governance and Administration (IGA) platforms, preferably Saviynt
• Privileged Access Management (PAM) solutions
• Microsoft Graph and Microsoft Graph PowerShell SDK
• Git or other source control systems
• Microsoft 365 administration
• Enterprise automation and workflow orchestration
• Identity migrations, mergers & acquisitions, or enterprise integration projects
• ITIL or operational service management practices.

Note: For this role it will be required to be onsite for the first two weeks for training.

With annual sales of $5.5 billion, Veralto is a global leader in essential technology solutions. Our operating companies help manage, treat, purify, and protect the world's water resources while supporting product quality, traceability, and essential goods across global supply chains. Joining Veralto means joining a company where purpose meets possibility—and where your work contributes to a safer, cleaner, and more sustainable future.

US ONLY:

The below range reflects the range of possible compensation for this role at the time of this posting. We may ultimately pay more or less than the posted range. This range may be modified in the future. An associate’s position within the salary range will be based on several factors, including, but not limited to, relevant education, qualifications, certifications, experience, skills, seniority, geographic location, performance, shift, travel requirements, sales or revenue-based metrics, any collective bargaining agreements, and business or organizational needs.

The compensation range for this role is $120,000 - $142,000 USD per year.

We offer a comprehensive package of benefits including paid time off, medical/dental/vision insurance and 401(k) to eligible employees.

Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, benefits, or any other form of compensation and benefits that are allocable to a particular employee remains in the Company's sole discretion unless and until paid and may be modified at the Company’s sole discretion, consistent with the law.

US residents: In any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information.

Veralto Corporation and all Veralto Companies are committed to equal opportunity regardless of race, color, national origin, religion, sex, age, marital status, disability, veteran status, sexual orientation, gender identity, or other characteristics protected by law. We value diversity and the existence of similarities and differences, both visible and not, found in our workforce, workplace and throughout the markets we serve. Our associates, customers and shareholders contribute unique and different perspectives as a result of these diverse attributes.

The EEO posters are available here.

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform crucial job functions, and to receive other benefits and privileges of employment. Please contact us at [e-mail] to request accommodation.