Senior Identity Platform Engineer — AI-Driven Security

Steelcase; Grand Rapids (MI); Hybrid; USD 100,000 - 135,000; Full time

Benefits offered by this job

Hybrid work schedule

Competitive wages and benefits

Continuous learning opportunities

Inclusion culture

Job summary

Steelcase is seeking a senior identity engineer to lead the next generation of our identity platform, including phishing-resistant authentication, Conditional Access, and privileged access management, while guiding migration from legacy Active Directory and designing secure non-human identities such as service accounts and AI agents.

You will build automation and AI-assisted workflows for provisioning, anomaly detection, and remediation, collaborating with HR, IT, and engineering to make secure

Qualifications

• Substantial hands-on experience designing, implementing, or operating enterprise identity and access management solutions.
• Strong understanding of modern authentication and authorization, including SAML, OIDC/OAuth, and FIDO2/passkeys, as well as directory services.
• A drive to automate identity work rather than repeat it, and comfort working against APIs such as Microsoft Graph.
• Experience leading technical initiatives and influencing outcomes across teams without direct authority.
• Bachelor's degree in a related field, or equivalent experience.

Responsibilities

• Architecting and building the next generation of Steelcase's identity platform: phishing-resistant authentication, Conditional Access, and privileged access management.
• Leading the retirement of legacy identity technologies and directory services, including reducing our dependence on legacy Active Directory, and designing the migration paths that get us there safely.
• Designing identity for non-human actors, including service accounts, workloads, and AI agents: how they authenticate, what they can reach, and how that access is reviewed and revoked.
• Building automation and AI-assisted workflows for provisioning, privileged access, anomaly detection, and remediation.
• Partnering with HR, IT, application owners, and engineering teams to make secure access the default and the easy path.
• Mentoring other engineers and setting technical standards and patterns for the Identity Management Office.
• Evaluating emerging identity and security technologies and running proofs of concept that shape our roadmap.

Skills

IAM design

Auth protocols

Automation via APIs

Influence without authority

Education

Bachelor's degree

Tools

Microsoft Graph

PowerShell

Python

CyberArk

Job description

Steelcase is seeking a senior identity engineer to lead the next generation of our identity platform, including phishing-resistant authentication, Conditional Access, and privileged access management, while guiding migration from legacy Active Directory and designing secure non-human identities such as service accounts and AI agents.

You will build automation and AI-assisted workflows for provisioning, anomaly detection, and remediation, collaborating with HR, IT, and engineering to make secure