Staff Identity Engineer: Secure Cloud IAM & Access

GEICO; Bethesda (MD); On-site; USD 110,000 - 230,000; Full time

Job summary

GEICO is seeking an experienced Staff Engineer to lead identity lifecycle engineering for cloud and on‑prem environments, ensuring secure access and scalable architectures for data assets. You will design, implement, and govern identity workflows, integrate with enterprise systems, and mentor teammates, while aligning with security and compliance across the org.

This role offers exposure to modern identity trends and opportunities to influence GEICO's data protection strategy in a hyper-growth

Qualifications

• Experience with identity governance platforms and IAM lifecycles.
• Ability to design and implement joiner/mover/leaver workflows.
• Knowledge of AD, Kerberos, LDAP, SAML, OAuth, OIDC.
• Experience integrating with ServiceNow/Workday/Oracle and cloud platforms.
• Fluency in DevOps concepts and SDLC.

Responsibilities

• Design, build and manage scalable identity governance solutions.
• Drive adoption of RBAC/ABAC and access controls.
• Implement Just-in-Time provisioning.
• Collaborate across security, compliance and application teams.
• Lead design reviews and mentor the team.

Skills

Identity Governance Platforms

RBAC ABAC SOD

Just‑in‑Time provisioning

Cloud & On‑Prem Identity

Java Go Python

PowerShell Bash

Security & Compliance

Education

Bachelor’s degree in Computer Science / IS

Tools

ServiceNow

Workday

Oracle

AWS

Azure

Job description

GEICO is seeking an experienced Staff Engineer to lead identity lifecycle engineering for cloud and on‑prem environments, ensuring secure access and scalable architectures for data assets. You will design, implement, and govern identity workflows, integrate with enterprise systems, and mentor teammates, while aligning with security and compliance across the org.

This role offers exposure to modern identity trends and opportunities to influence GEICO's data protection strategy in a hyper-growth