Senior Security Engineer

NewVision Software; United States; Remote; USD 140,000 - 200,000; Full time

Job summary

NewVision Software in the United States is seeking a Senior Identity & Access Engineer to design and implement IAM across cloud and on-prem environments, with emphasis on SailPoint IGA and Microsoft Entra ID.

The role requires 7+ years in IAM, strong DevOps/IaC experience, and the ability to lead large-scale implementations, integrate with multi-regional tenants, and support audits.

Qualifications

• 7+ years of IAM, identity security, or related enterprise security engineering experience.
• 5+ years hands-on with enterprise IAM platforms and 3+ years designing SailPoint or cloud identity implementations.
• Experience with CI/CD, DevOps delivery, and IaC for cloud/IAM.
• Experience with cloud tenants across multi-regional areas and complex network connectivity.
• Hands-on with Microsoft Entra ID including CA, MFA, etc.
• Own escalated IAM incidents with coordination across L3 teams.

Responsibilities

• Lead SailPoint implementations and integrations.
• Design and manage identity lifecycle, federation, and access governance.
• Collaborate with L3 and senior teams to resolve IAM incidents.
• Document cloud tenant setups and connectivity requirements.
• Support audit and compliance activities (SOC 2, ISO 27001, etc.).

Skills

IAM

SailPoint IGA

Microsoft Entra ID

DevOps practices

CI/CD

Infrastructure as Code

Networking basics

Cloud security

Tools

SailPoint

Microsoft Entra ID

Azure DevOps

Terraform

Job description

Title: Senior Identity & Access Engineer

Duration: Long Term

Location: 100% Remote

Required Skills & Experience:

• Strong hands‑on experience with SailPoint IGA
• Deep knowledge of IAM protocols, federation, and lifecycle design

• Experience standing up and documenting cloud tenants that support multi-regional areas, including complex network connectivity, authentication, authorization, and SailPoint integration requirements
• Experience with CI/CD development practices, DevOps-based delivery, and Infrastructure as Code working models for cloud, IAM, and SailPoint-related implementations
• Hands‑on experience with Microsoft Entra ID and large-enterprise IAM practices, including Conditional Access, MFA, enterprise applications, hybrid identity, privileged access, access reviews, identity lifecycle, and audit support
• Own escalated IAM incidents and complex support cases with clear communication, timely resolution, and appropriate coordination across L3 and senior technical teams
• Typically requires 7+ years of experience in IAM, identity security, infrastructure, cloud security, or related enterprise security engineering roles
• Typically requires 5+ years of hands‑on experience with enterprise IAM platforms and 3+ years designing or leading SailPoint, Microsoft Entra ID, federation, or cloud identity implementations

Preferred Qualifications:

• Experience leading large-scale SailPoint implementations, upgrades, connector integrations, role engineering, or access certification modernization
• Experience engineering Microsoft Entra ID in complex enterprise environments, including Conditional Access, hybrid identity, privileged access, enterprise applications, and workload identities
• Familiarity with Azure DevOps, Git-based development, CI/CD pipelines, Terraform, , or similar Infrastructure as Code tooling
• Experience supporting SOC 2, ISO 27001, CMMC, or other regulated control environments
• Experience designing controls for service accounts, service principals, automation identities, workload identities, and AI-enabled non-human identities.