Senior Security Engineer

Senior Security Engineer, IBM Corporation, Armonk, NY and various unanticipated client sites throughout the US (Up to 100% telecommuting permitted):

• Define metrics and implement security best practices to guide the organization’s security posture across multicloud environments.
• Collaborate with engineering and stakeholders to design and support secure by default enterprise and product environments.
• Develop security tooling and automation, including Nonhuman Identity (NHI) frameworks, graphbased authorization models, and contextual access control policies.
• Automate and monitor compliance pipelines to meet internal security policies and regulatory requirements.
• Apply reliability engineering to maintain availability, performance, and stability of identity services.
• Implement and support federated identity brokerage, dynamic credential management, and internal identity governance pipelines using Terraform and GitHub Actions.
• Design and maintain centralized access policies and scale identity services across internal systems and cloud environments.
• Create selfservice identity provider workflows and automate access controls to reduce auditing needs.
• Develop security tools and cloud native applications using Go and/or Python and support production deployments.
• Participate in on call rotations for infrastructure incidents and contribute to industry knowledge through conference participation and publications.
• Utilize: Identity and Access Management (IAM) - Active Directory (AD), OpenID Connect (OIDC), OAuth 2.0, Python, Go, Amazon Web Services (AWS), Typescript, React, Non-Human Identity (NHI) frameworks, AWS CloudWatch.

Required: Bachelor’s degree or equivalent in Computer Science, Engineering or related and two (2) years of experience as a Security Engineer, Software Engineer or related. Two (2) years of experience must include utilizing Identity and Access Management (IAM) - Active Directory (AD), OpenID Connect (OIDC), OAuth 2.0, Python, Go, Amazon Web Services (AWS), Typescript, React, Non-Human Identity (NHI) frameworks, AWS CloudWatch. $202880 to $252000 per year. Full time. AV218.