Senior Identity Engineer

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Identity Engineer based in United States. This is a senior-level engineering role focused on building and evolving secure, scalable identity and access management capabilities across a modern enterprise technology environment. You will combine hands-on engineering with solution architecture to support cloud, SaaS, API, and AI-enabled platforms. The role has a strong emphasis on Zero Trust, least-privilege access, identity governance, and modern authentication. You will help design identity controls for AI agents, copilots, workload identities, and machine-to-machine services. Working closely with security, infrastructure, cloud, application, and engineering teams, you will translate complex requirements into resilient identity solutions. This is an opportunity to influence enterprise security architecture while driving continuous modernization of identity services. Design, implement, maintain, and continuously improve enterprise IAM solutions across Microsoft Entra ID, Microsoft 365, Okta, AWS, Azure, and SaaS environments. Lead the engineering and operational support of identity services covering authentication, authorization, federation, SSO, MFA, lifecycle management, and privileged access. Develop identity standards, reference architectures, engineering practices, and security controls aligned with Zero Trust and least-privilege principles. Design and implement secure identity integrations for cloud platforms, applications, APIs, third-party services, and enterprise SaaS environments. Build identity controls for AI platforms and services, including secure authentication, authorization, workload identities, API security, and access governance. Partner with security and engineering teams to establish appropriate identity controls for AI agents, copilots, machine identities, and service accounts. Engineer and support identity governance capabilities, including Joiner-Mover-Leaver processes, access reviews, RBAC, and privileged identity management. Collaborate with infrastructure, cloud, application, and security teams to embed identity capabilities into enterprise architectures and technology solutions. Support identity-related security initiatives, incident response, troubleshooting, and continuous improvement efforts. Evaluate emerging IAM technologies through proof-of-concepts, technical assessments, and security benchmarking to identify opportunities for modernization. Contribute to identity automation and operational efficiency through scripting, Infrastructure as Code, and repeatable engineering practices. Requirements 7+ years of experience designing, implementing, and supporting enterprise identity and access management solutions. Strong hands-on expertise with Microsoft Entra ID, Microsoft 365, Okta, AWS IAM, and Azure identity services. Demonstrated experience with modern identity and authentication protocols, including SAML, OAuth 2.0, OpenID Connect, and SCIM. Strong understanding of Zero Trust architecture, identity governance and administration, privileged access management, cloud security, and least-privilege principles. Experience securing identity architectures across cloud platforms, SaaS applications, APIs, and AI-enabled applications, including workload identities and machine-to-machine authentication. Understanding of identity security for generative AI and AI agents, including secure access to AI platforms, API authorization, secret management, and governance of AI service identities. Experience integrating SaaS applications with enterprise identity providers and supporting complex enterprise identity environments. Experience with Infrastructure as Code and automation using PowerShell, Python, or similar technologies is preferred. Experience with hybrid identity environments and large-scale cloud migrations is advantageous. Relevant Microsoft, Okta, AWS, Azure Identity,