Senior Identity Engineer

Drake Software; United States; On-site; USD 140,000 - 190,000; Full time

Job summary

Taxwell is seeking a Senior Identity Engineer to design, implement, and operate IAM across cloud, SaaS, and AI environments. You will lead authentication, authorization, SSO, MFA, lifecycle management, and privileged access with a focus on Zero Trust.

You will collaborate with security and engineering teams to enforce identity controls, governance, and secure integrations while advancing IaC-driven automation.

Qualifications

• 7+ years designing and implementing enterprise IAM solutions.
• Hands-on with Entra ID, M365, Okta, AWS IAM, and Azure identity services.
• Experience with SAML, OAuth 2.0, OpenID Connect, SCIM; strong Zero Trust knowledge.
• Experience securing cloud/SaaS APIs, AI platform identities, and governance.

Responsibilities

• Design and maintain enterprise IAM across Microsoft 365, Entra ID, Okta, AWS, Azure and SaaS apps.
• Lead authentication, authorization, federation, SSO, MFA, lifecycle management, and privileged access.
• Develop identity standards, reference architectures, and best practices per Zero Trust.
• Implement secure identity integrations for cloud platforms, apps, APIs, and third‑party services.
• Design controls for AI platforms, workload identities, API security, and access governance.
• Collaborate with security/engineering to enforce identity controls for AI agents and service accounts.
• Govern Joiner‑Mover‑Leaver, access reviews, RBAC, and privileged identity management.
• Integrate identity into enterprise solutions and cloud architectures via IaC and automation.
• Support identity security initiatives, incident response, and ongoing improvements.
• Evaluate new IAM technologies and conduct proof-of-concept security benchmarking.

Skills

Microsoft Entra ID

Microsoft 365

Okta

AWS IAM

Azure Identity

OAuth 2.0

OpenID Connect

SCIM

Zero Trust

RBAC

IGA

Tools

PowerShell

Python

Job description

Taxwell helps everyday Americans get every tax advantage they deserve by finding credits and deductions they never even knew existed. Our tax preparation software offers easy guidance and ensures your maximum tax refund. We strive to build a team of like-minded experts in both tax and technology who align with our brand purpose, are advocates for our customers and have a fresh, non-traditional approach to the tax industry.

Taxwell is a leading digital tax filing platform formed in 2022 from the combination of Drake Software® and TaxAct®. These two longstanding organizations offer customers professional and do-it-yourself digital and downloadable products that are easy-to-use, best-in-class technology, and provide unparalleled customer support. Taxwell brands are a trusted solution for all users including those with complex tax returns. We strive to attract and retain candidates who exemplify our values: performance, perseverance, progress and partnership. Taxwell is an organization of forward thinkers looking to add industry experts to our growing team.

Senior Identity Engineer

Role Summary

We are seeking a highly skilled Senior Identity Engineer to lead the design, implementation, and ongoing engineering of the organization's identity and access management (IAM) capabilities. This role combines hands‑on engineering with solution architecture, ensuring secure, scalable, and modern identity services across cloud and SaaS platforms.

Key Responsibilities

• Design, implement, and maintain enterprise IAM solutions across Microsoft 365, Microsoft Entra ID, Okta, AWS, Azure and SaaS applications.
• Lead the design, engineering, and operational support of identity services, including authentication, authorization, federation, SSO, MFA, lifecycle management, and privileged access.
• Develop identity standards, reference architectures, and engineering best practices aligned with Zero Trust principles
• Design and implement secure identity integrations for cloud platforms, applications, APIs, and third‑party services.
• Design and implement identity controls for AI platforms and services, including secure authentication, authorization, workload identities, API security, and access governance for enterprise AI solutions.
• Partner with security and engineering teams to implement identity controls for AI agents, copilots, machine identities, and service accounts while supporting Zero Trust principles and least‑privilege access.
• Engineer and support identity governance capabilities, including Joiner‑Mover‑Leaver processes, access reviews, role‑based access control (RBAC), and privileged identity management.
• Partner with infrastructure, cloud, application, and security teams to integrate identity into enterprise solutions and cloud architectures.
• Support identity‑related security initiatives, incident response, and continuous improvement activities.
• Evaluate new IAM technologies and proof-of-concept and security benchmarking of identity technologies.

Required Experience

• 7+ years of experience designing and implementing enterprise IAM solutions.
• Strong hands‑on experience with Microsoft Entra ID, Microsoft 365, Okta, AWS IAM, and Azure identity services.
• Experience implementing SAML, OAuth 2.0, OpenID Connect, SCIM, and modern authentication protocols.
• Strong understanding of Zero Trust, identity governance, privileged access management, and cloud security best practices.
• Experience securing modern identity architectures for cloud, SaaS, APIs, and AI‑enabled applications, including OAuth, OpenID Connect, workload identities, and machine‑to‑machine authentication.
• Understanding identity security considerations for Generative AI and AI agents, including secure access to AI platforms, API authorization, secret management, and governance of AI service identities.
• Experience integrating SaaS applications with enterprise identity providers.
• Experience with Infrastructure as Code and Automation (PowerShell, Python, or similar) is preferred.
• Excellent communication and stakeholder engagement skills with the ability to translate business requirements into secure identity solutions.

Preferred Qualifications

• Relevant certifications such as Microsoft, Okta, AWS, Azure Identity & cloud security certifications.
• Experience with identity governance and administration (IGA) platforms.
• Experience supporting hybrid identity environments and large‑scale cloud migrations.

At Taxwell, we believe our work benefits from the diverse perspectives of our employees. As such, Taxwell welcomes and celebrates diversity and inclusion and is committed to equal opportunity employment. At Taxwell, you can expect a supportive, open, and inclusive atmosphere and a team that values your contributions.

Taxwell is committed to providing an environment of mutual respect where equal employment opportunities are available to all applicants without regard to race, color, religion, sex, national origin, age, disability, marital status, sexual orientation, gender identity, veteran status, and any other status protected under applicable law. Taxwell considers information gathered in the hiring process, including information on this application, confidential, and only shares it on a need‑to‑know basis or as required by law.

If you need assistance or accommodation due to a disability, you may contact us at [e-mail] or by calling 828-349-5887 to speak with a member of the HR Talent Acquisition team.