Job DescriptionWho you are:You know identity is the control plane for modern security, and you want to build one that people actually like using: passwordless, phishing-resistant, and invisible when it works.
You are a senior engineer who leads through design and example. You are excited about the identity problems that did not exist five years ago, such as securing workloads, service accounts, and AI agents, and you would rather define the answer than wait for a vendor to.
You automate. You would rather build the workflow than process the ticket, and you see AI as the way to make identity work continuous and self-correcting instead of manual and periodic.
You'll Support Meaningful Work By:- Architecting and building the next generation of Steelcase's identity platform: phishing-resistant authentication, Conditional Access, and privileged access management.
- Leading the retirement of legacy identity technologies and directory services, including reducing our dependence on legacy Active Directory, and designing the migration paths that get us there safely.
- Designing identity for non-human actors, including service accounts, workloads, and AI agents: how they authenticate, what they can reach, and how that access is reviewed and revoked.
- Building automation and AI-assisted workflows for provisioning, privileged access, anomaly detection, and remediation.
- Partnering with HR, IT, application owners, and engineering teams to make secure access the default and the easy path.
- Mentoring other engineers and setting technical standards and patterns for the Identity Management Office.
- Evaluating emerging identity and security technologies and running proofs of concept that shape our roadmap.
Minimum Qualifications- Substantial hands-on experience designing, implementing, or operating enterprise identity and access management solutions.
- Strong understanding of modern authentication and authorization, including protocols such as SAML, OIDC/OAuth, and FIDO2/passkeys, as well as directory services.
- A drive to automate identity work rather than repeat it, and comfort working against APIs such as Microsoft Graph. Whether you write the PowerShell or Python yourself or build it with AI and low-code tooling matters far less to us than knowing what to automate and why.
- Experience leading technical initiatives and influencing outcomes across teams without direct authority.
- Bachelor's degree in a related field, or equivalent experience.
Desired Skills and Experience- Deep experience with Microsoft Entra ID, Conditional Access, Privileged Identity Management, and Intune integration.
- Experience with privileged access management platforms such as CyberArk, Delinea, or BeyondTrust.
- Experience securing workload identities, secrets, and machine-to-machine or agent-to-service access.
- Experience applying Zero Trust principles in a large, global enterprise.
- Have you helped an organization meaningfully shrink or eliminate its reliance on legacy Active Directory? That is rare, and we are not expecting it on day one. But we know legacy AD is a liability, we intend to do something about it, and we would love to talk with anyone who has been part of that journey.
- Experience using AI or automation to streamline identity operations, authentication rollouts, or investigation work.
- Certifications such as SC-300, CISSP, CIDPRO, or CCZT.
Qualified applicants must be authorized to work in the United States on a full-time basis. Steelcase will not provide support for or sponsor work authorization and/or visas for this role.
QualificationsAdditional InformationThe starting annual base salary range for this position is $100,000 - $135,000. Please note that the salary information is a general guideline only. Steelcase considers factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience, education/training, key skills, internal peer equity, as well as market and business considerations when extending an offer.
#mid_senior_level #LI-Onsite #Information_Technology #Management #Consulting #LI-EW1
