Staff Identity Lifecycle Engineer – IAM & Governance

Government Employees Insurance Company; Bethesda (MD); On-site; USD 110,000 - 230,000; Full time

Job summary

GEICO seeks an experienced Staff Engineer to lead Identity Lifecycle Engineering for cloud and on‑prem environments. You will guide design, development and security of identities, collaborating across teams to deliver scalable and compliant solutions.

The ideal candidate brings broad Identity Lifecycle experience, proficiency in modern authentication protocols, and abilities to mentor peers while driving improvements across security, compliance, and architecture.

Qualifications

• Identity governance platforms including lifecycle management and access certification
• Joiner/mover/leaver workflows and provisioning automation
• Experience with security protocols: AD, Kerberos, LDAP, SAML, OAuth, OIDC
• Integrating identity platforms with ServiceNow, Workday, Oracle and cloud platforms (AWS/Azure)
• Fluency in DevOps concepts and SDLC
• Proficiency with development tooling across the SDLC
• Experience with microservices and REST APIs
• Proficiency in Java/Go/Python
• Scripting in PowerShell, Perl, or Bash
• Strong problem-solving and security-risk mitigation
• Excellent communication to technical and non-technical stakeholders

Responsibilities

• Design, Build and Manage scalable Identity Governance solutions
• Drive adoption of RBAC, ABAC and SOD controls enterprise-wide
• Implement Just-in-Time provisioning
• Engage in cross-functional collaboration across project lifecycles
• Lead design sessions and technology reviews to elevate engineering quality
• Build backend APIs and services exposing identity capabilities
• Maintain IAM design, processes, and documentation
• Support a team environment that fosters innovation, diversity, and inclusion
• Stay current with identity trends and apply to GEICO’s data protection strategies
• Provide technical guidance and mentorship to the team

Skills

Identity Governance

Security best practices

Cross-functional collaboration

Proactive risk mitigation

Mentorship

Education

Bachelor's degree in Computer Science or Information Systems

Tools

Sailpoint

Saviynt

Okta

Active Directory

Kerberos

LDAP

SAML

OAuth

OIDC

ServiceNow

Workday

AWS

Azure

GCP

Job description

GEICO seeks an experienced Staff Engineer to lead Identity Lifecycle Engineering for cloud and on‑prem environments. You will guide design, development and security of identities, collaborating across teams to deliver scalable and compliant solutions.

The ideal candidate brings broad Identity Lifecycle experience, proficiency in modern authentication protocols, and abilities to mentor peers while driving improvements across security, compliance, and architecture.