Senior Zero-Trust Security Engineer: IAM & Auth Frameworks

Jobtailor; Reston (VA); On-site; USD 180,000 - 240,000; Full time

Job summary

Jobtailor is seeking a senior security software engineer to design and build zero-trust authentication and authorization frameworks. You will create reusable libraries, APIs, and reference implementations, and develop developer guides to streamline secure integrations with security services.

You will implement fine-grained access control patterns and collaborate with architects to meet performance, usability, and compliance requirements in IL6+ environments.

Qualifications

• Minimum 10 years professional experience in software engineering, security engineering, or related roles.
• Active TS/SCI + CI Poly clearance.
• Strong experience designing, developing, and deploying application components leveraging AWS cloud services in IL6+ classified environments.
• Expert-level experience implementing authentication and authorization frameworks (e.g., OAuth 2.0, OIDC, SAML).
• Strong, repeat experience with commercial or open-source identity and access management platforms (e.g., ForgeRock, Okta, Keycloak, Ping Identity).
• Strong expertise with fine-grained access control models (entitlements, row-level security, ABAC).
• Expert proficiency in at least one programming language (e.g., Java, Go, Python) for building frameworks and libraries.
• Solid experience with zero trust architecture and principles.
• Experience creating developer documentation and integration guides.
• Strong grasp of secure coding practices and software development lifecycle (SDLC) security.

Responsibilities

• Design, develop, and maintain reusable frameworks, libraries, APIs, and reference implementations for zero trust authentication and authorization.
• Create developer guides, documentation, and best practices to enable smooth integration with security services.
• Implement and support fine-grained authorization patterns (entitlements, row-level security, ABAC).
• Collaborate with architects and engineers to ensure security services meet performance, usability, and compliance requirements.
• Conduct code reviews and provide guidance to development teams on secure coding and integration practices.
• Research emerging zero trust and identity/access management technologies to recommend improvements.

Skills

OAuth 2.0

OIDC

SAML

Zero Trust Architecture

Fine-Grained Access Control

Entitlements

Row-Level Security

ABAC

Java

Go

Python

Secure Coding Practices

SDLC Security

Education

Bachelor's Degree or Equivalent Experience

Tools

AWS

ForgeRock

Okta

Keycloak

Ping Identity

Job description

Jobtailor is seeking a senior security software engineer to design and build zero-trust authentication and authorization frameworks. You will create reusable libraries, APIs, and reference implementations, and develop developer guides to streamline secure integrations with security services.

You will implement fine-grained access control patterns and collaborate with architects to meet performance, usability, and compliance requirements in IL6+ environments.