Staff Identity Lifecycle Engineer - Secure Cloud Governance

Geico; Palo Alto (CA); On-site; USD 110,000 - 230,000; Full time

Job summary

GEICO is seeking a Staff Engineer to lead Identity Lifecycle and Governance initiatives across cloud and on‑prem environments. You will design scalable identity systems, implement RBAC/ABAC controls, and drive secure provisioning while collaborating with security, compliance and application teams.

The role emphasizes mentorship, cross‑team collaboration, and staying ahead of evolving identity trends to protect GEICO’s data assets and enable agile product delivery.

Qualifications

• Extensive experience in identity governance and access management for large enterprises.
• Proven ability to implement joiner/mover/leaver workflows and entitlement management.
• Experience with cloud and on-prem identity ecosystems and automation.

Responsibilities

• Design, Build and Manage scalable, resilient Identity Governance solutions.
• Drive adoption of RBAC, ABAC and SOD controls within the enterprise.
• Implement Just-in-Time provisioning and automate identity tasks across ecosystems.
• Engage in cross-functional collaboration to align with organizational objectives.
• Build backend APIs and services exposing identity capabilities to apps.
• Provide technical guidance and mentorship to the team.

Skills

Identity governance

RBAC/ABAC/SOD

JIT provisioning

API design

Education

Bachelor's degree in Computer Science or related

Tools

Sailpoint

Saviynt

Okta

Active Directory

LDAP

SAML/OIDC

OAuth

Job description

GEICO is seeking a Staff Engineer to lead Identity Lifecycle and Governance initiatives across cloud and on‑prem environments. You will design scalable identity systems, implement RBAC/ABAC controls, and drive secure provisioning while collaborating with security, compliance and application teams.

The role emphasizes mentorship, cross‑team collaboration, and staying ahead of evolving identity trends to protect GEICO’s data assets and enable agile product delivery.