Senior Identity & Security Engineer – SSO/IAM Platform

Siteimprove; Bellevue (WA); On-site; USD 140,000 - 210,000; Full time

Job summary

Siteimprove is seeking a Software Engineer with deep authentication, authorization, and IdP expertise to secure our platform and serve enterprise clients. You will design login, MFA, token services, and SSO integrations, while shaping policy-driven authorization for product teams and AI agents.

You will own provisioning workflows, drive reliability and observability, and mentor engineers. The role requires strong cloud experience on AWS or Azure and a clear, collaborative communication style.

Qualifications

• 6+ years of professional software engineering, with 3+ years in authentication/identity systems in production.
• Strong backend skills in C#/.NET or Java depending on service.
• Deep knowledge of OAuth 2.0/2.1, OpenID Connect, and SAML 2.0.

Responsibilities

• Build and run login, session, MFA, and token services (SSO/federation).
• Own SAML and OIDC integrations with customer IdPs.
• Define and improve provisioning across SCIM, JIT, and deprovisioning.
• Evolve centralized permissions and authorization services at scale.
• Define how AI agents and MCP servers authenticate via OAuth 2.x and token exchange.
• Design against token abuse and ensure FedRAMP identity controls.
• Lead design reviews and mentor engineers across the team.
• Travel may be required; a valid passport is required.

Skills

Engineering depth

Backend stack

OAuth 2.0 / OIDC / SAML

IdP experience

Authorization design

Security mindset

Cloud-native systems (AWS/Azure)

AI-native delivery

Clear communication

Job description

Siteimprove is seeking a Software Engineer with deep authentication, authorization, and IdP expertise to secure our platform and serve enterprise clients. You will design login, MFA, token services, and SSO integrations, while shaping policy-driven authorization for product teams and AI agents.

You will own provisioning workflows, drive reliability and observability, and mentor engineers. The role requires strong cloud experience on AWS or Azure and a clear, collaborative communication style.