Sr Security Engineer

Adobe Inc.; Lehi (UT); On-site; USD 120,000 - 180,000; Full time

Job summary

Adobe Inc. in Utah—Lehi is seeking a Security Architect for Identity & SaaS Security to design and operationalize scalable identity capabilities enterprise-wide.

You will implement Zero Trust controls, RBAC/ABAC, and integrate Entra ID, Okta, and SailPoint; collaborate with IT and security teams to reduce identity risk and improve security outcomes.

Qualifications

• Experience delivering identity and SaaS security outcomes.
• Ability to implement RBAC/ABAC and device posture checks.
• Experience with Entra ID/AD, Okta, SailPoint.

Responsibilities

• Engineer ZeroTrust access controls for workforce and service identities.
• Harden privileged access by right-sizing entitlements and reducing long-lived elevated access.
• Participate in tool POCs and deployments for SaaS security posture monitoring across SaaS like M365, Slack, GitHub.
• Instrument identity metrics and publish dashboards showing privilege drift and misconfigurations.
• Contribute to architecture and reference designs supporting multi-year risk reduction.

Skills

Entra ID/AD

Okta

SailPoint

Zero Trust

Education

Bachelor's degree or equivalent experience

Tools

Terraform

Python

PowerShell

Job description

Overview

The team focuses on Identity Architecture & Solutions by crafting, building, and operationalizing scalable identity and SaaS security capabilities enterprise-wide. This technical role depends on members passionate about Identity & SaaS Security functions, identity architecture strategy, and encouraging teamwork. We collaborate as an organization to reduce identity-centric risk, with each member essential to delivering security value and outcomes.

Responsibilities

• Engineer ZeroTrust access controls for workforce and service identities. Develop and implement pipelines using RBAC and ABAC standards. Include device and posture checks and riskadaptive policies for critical services and high-risk scenarios.
• Harden privileged access: migrate administrators to rightsize entitlements and eliminate longlived elevated access across prioritized platforms (e.g., Entra ID, Privileged Access Management).
• Participate in tool POCs and deployments for SaaS security posture monitoring. Define baselines for M365, Slack, GitHub, Workday, and Google. Build remediation runbooks and posture success measurements.
• Instrument identity metrics collection and tracking by standardizing log schemas for authentication, authorization, and entitlement changes. Publish dashboards showing privilege drift, misconfigurations, and access sprawl. Coordinate risky events with security alert procedures.
• Contribute and drive architecture & standards: author implementation guides and reference architecture that supports a multiyear strategy passionate about measuring risk reduction over time. Inclusive of new technologies and risks.

Qualifications

• Experience with enterprise identity controls and solutions, including delivering outcomes that use Entra ID/AD, Okta, and SailPoint (or equivalents)
• Strong understanding of core Zero Trust principles, the least privilege and continuous verification models, and incorporating those into the enterprise
• SaaS posture skills for securing large SaaS tenants (M365, Slack, GitHub, Workday, Google), including security Authn and Authz for all identities accessing SaaS tenants
• Influence and collaborate with key partners in IT and other security teams. Work together to develop security outcomes that reduce risk and require creative problem solving.
• Excellent written and verbal communication skills, including communicating complex problems and solutions to business leaders and technical specialists
• Ability to deliver measurable outcomes in a technical environment that align with long term goals
• Active team participation and an inquisitive mind passionate about delivering creative solutions and working collaboratively

Preferred Qualifications

• Engineering familiarity with secure access control solutions (e.g. Teleport, Vault), secrets management, and CI/CD solutions and their customers.
• Scripting/automation knowledge (e.g., Python, PowerShell) and infrastructureascode (e.g., Terraform) for policy and pipeline automation.
• Exposure to service identity frameworks (e.g., SPIFFE/SPIRE) and workload identity patterns.
• Experience/Education requirements ~5+ years relevant experience; Bachelor's required or equivalent experience

Equal Employment Opportunity Statement

Adobe is an Equal Employment Opportunity employer. We do not discriminate based on gender, race or color, ethnicity or national origin, age, disability, religion, sexual orientation, gender identity or expression, veteran status or any other protected characteristic. If you have a disability or special need that requires accommodation to navigate our website or complete the application process, email [e-mail].