Senior Identity Security Engineer: Zero-Trust & AI

CoStar Group, Inc.; Arlington (VA); On-site; USD 133,000 - 203,000; Full time

Benefits offered by this job

Healthcare coverage

401(k) matching

Stock purchase plan

Paid time off

Tuition reimbursement

Job summary

CoStar Group is seeking a Senior Identity Security Engineer in Arlington, VA or San Diego, CA to fortify identity security controls across platforms. You will develop conditional access, review logs, and support an org-wide phish-resistant authentication rollout, collaborating with Security, DevOps, and Development teams.

The role emphasizes AI-assisted tooling and workload identities, with a focus on PKI, FIDO2, and device compliance, under a zero-trust framework.

Qualifications

• Bachelor’s Degree required from an accredited university.
• 4+ years of hands-on security engineering experience.
• Experience administrating IDPs (Okta, PingID, Entra ID, Active Directory).
• Knowledge of SAML, OAuth, OIDC, Kerberos and PKI/FIDO2.

Responsibilities

• Design, implement, and improve identity security controls across platforms.
• Develop conditional access policies enforcing strong authentication.
• Analyze logs to guide rollouts of security initiatives.
• Document projects, standards, and runbooks; communicate with stakeholders.

Skills

Analytical problem solving

Data-driven decision making

Python scripting

Reading SIEM logs

Identity security hygiene

Education

Bachelor’s Degree

Tools

Okta

PingID

Microsoft Entra ID

Active Directory

Job description

CoStar Group is seeking a Senior Identity Security Engineer in Arlington, VA or San Diego, CA to fortify identity security controls across platforms. You will develop conditional access, review logs, and support an org-wide phish-resistant authentication rollout, collaborating with Security, DevOps, and Development teams.

The role emphasizes AI-assisted tooling and workload identities, with a focus on PKI, FIDO2, and device compliance, under a zero-trust framework.