About this role:

This role will establish engineering strategy, reference architectures, and reusable patterns across identity lifecycle management, access governance, privileged access, cloud-native platforms, and emerging AI capabilities. The Principal Engineer will remain hands-on while partnering with Cybersecurity, Product, Risk, Architecture, Infrastructure, and Application teams to deliver secure, scalable, resilient, and compliant identity services.

In this role, you will:

• Serve as a principal technical advisor for enterprise IAM, identity governance, privileged access, authentication, authorization, and cloud-native security initiatives.
• Define technical strategy, reference architectures, engineering standards, and reusable patterns for enterprise identity platforms.
• Lead the design and modernization of highly complex IAM and PAM platforms using Java, Spring Boot, microservices, APIs, Kubernetes, and cloud technologies.
• Design identity lifecycle, application onboarding, access governance, role-based access, least-privilege, segregation-of-duties, and access recertification capabilities.
• Develop secure integrations across IAM, IGA, PAM, cloud, application, and enterprise service-management platforms.
• Provide engineering leadership for privileged access solutions, including time-bound access, session provisioning, secrets management, auditing, and access monitoring.
• Establish fine-grained authorization patterns for applications, APIs, workload identities, AI agents, and machine-to-machine interactions.
• Evaluate and implement secure Generative AI capabilities, including AI agents, MCP servers, RAG solutions, identity propagation, and authorization controls.
• Establish observability, resiliency, testing, deployment, and production-support practices for security-critical identity platforms.
• Partner with senior leaders and stakeholders to define platform roadmaps, prioritize investments, and translate business and regulatory requirements into engineering solutions.
• Mentor engineers and technical leads while promoting software engineering, security, automation, and operational best practices.
• Evaluate emerging identity, security, cloud, and AI technologies and recommend innovations that strengthen security and improve engineering efficiency.
• Demonstrate proficiency in using AIassisted development and analysis tools (e.g., GitHub Copilot and approved codecentric agents)
• Leverage AI to accelerate system design, coding, testing, analysis, and troubleshooting
• Apply strong technical judgment when validating and integrating AIassisted outputs into solutions
• Understand and account for model limitations, security risks, and operational considerations
• Apply AI responsibly in development and production environments
• Ensure AI usage aligns with security, compliance, privacy, and ethical standards

Required Qualifications:

• 7+ years of Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
• 7+ years of Experience designing and engineering enterprise Identity and Access Management, Identity Governance and Administration, or Privileged Access Management platforms

Desired Qualifications:

• Advanced development experience with Java, Spring Boot, Spring Security, REST APIs, microservices, and event-driven architectures.
• Experience with IAM or PAM platforms such as Saviynt, Oracle Identity Manager, CyberArk, BeyondTrust, or comparable technologies.
• Experience developing identity lifecycle, Joiner-Mover-Leaver, access recertification, role management, segregation-of-duties, and least-privilege solutions.
• Experience designing privileged access capabilities, including session provisioning, credential management, access monitoring, audit controls, and time-bound access.
• Experience modernizing enterprise platforms using Kubernetes, EKS, Docker, Helm, Terraform, GitOps, and cloud-native engineering patterns.
• Experience developing CI/CD pipelines and automated delivery practices using GitHub Actions, Argo CD, Bamboo, Bitbucket, or similar technologies.
• Knowledge of authentication, authorization, RBAC, policy-based access control, workload identity, secrets management, and fine-grained entitlement models.
• Experience designing secure AI platforms involving Generative AI, AI agents, MCP servers, RAG, LLM integrations, or AI authorization controls.
• Experience establishing enterprise reference architectures, engineering standards, design-review practices, and platform roadmaps.
• Experience supporting security-critical platforms in regulated environments, including audit readiness, risk management, monitoring, and production support.
• Strong executive communication, stakeholder management, technical leadership, and engineering mentorship skills.

Locations:

• 150 E 42nd Street, New York, NY 10017

Posting Statements:

• Job posting may come down early due to volume of applicants.
• Required location(s) listed above. Relocation assistance is not available for this position
• Salary range is determined by location of the job. May be considered for a discretionary bonus, Restricted Share Rights, or other long term incentive awards.
• This role is NOT available for 100% remote work

Pay Range

Posting End Date:

*Job posting may come down early due to volume of applicants.