security engineer in enterprise IAM

Relativity develops software products and provides enterprise technology solutions.

• Implement and operate identity controls across workforce, machine, and workload identity domains;
• Operate continuous adaptive trust mechanisms, including continuous access evaluation, risk-based step-up authentication, and session revocation;
• Configure ZTNA, least-privilege access, phishing-resistant MFA/FIDO2, and JIT access;
• Implement SSO, federation, and authentication standards across SaaS and multi-cloud environments;
• Apply CIS Benchmarks and DISA STIGs to identity infrastructure with automated compliance validation;
• Build and maintain identity lifecycle automation integrating HR systems, directories, and downstream applications;
• Operate IGA workflows, including access reviews, certification campaigns, and segregation-of-duties checks;
• Administer PAM, including credential vaulting, JIT elevation, and session monitoring;
• Maintain governance of non-human identities using drift detection and policy-as-code;
• Feed identity telemetry into SIEM/SOAR and UEBA detection systems;
• Execute identity-focused incident response playbook steps for account takeover, credential compromise, and session hijacking;
• Implement identity checks in CI/CD pipelines, including secret scanning and IaC identity analysis;
• Act on AI-generated fix recommendations in pull request workflows;
• Track identity hygiene metrics and support audits, certifications, and e-discovery requirements alongside GRC.

• Ability to obtain and maintain the required Public Trust clearance;
• Bachelor's degree in Computer Science, Information Security, or equivalent experience;
• 5+ Years of hands-on experience in enterprise IAM or security engineering focused on identity, authentication, and access, or a Master's degree in Cybersecurity or a relevant field;
• Hands-on experience with IdP/SSO tools such as Okta, Entra ID/Azure AD, and Ping;
• Experience with IGA tools such as SailPoint and Saviynt;
• Experience with PAM tools such as CyberArk and BeyondTrust;
• Intermediate knowledge of SAML, OIDC, OAuth 2.0, SCIM, LDAP, and Kerberos;
• Basic knowledge of MITRE, NIST 800-63, and Zero Trust;
• Proficiency in Python, Bash, or PowerShell for automation and identity use cases;
• Ability to communicate technical findings clearly to technical and non-technical stakeholders;
• Nice to have: AI-enabled identity operations, cloud environments and native identity services, software development lifecycle and infrastructure-as-code, non-human/workload/AI-agent identity, secrets management, machine-to-machine authentication, SOC 2, ISO 27001, FedRAMP, HIPAA, relevant security certifications.

• Competitive base salary, annual performance bonus, and long-term incentives;
• No conditions specified.