Senior Security Engineer

Introduction

Your role and responsibilities

Senior Security Engineer, IBM Corporation, Armonk, NY and various unanticipated client sites throughout the US (Up to 100% telecommuting permitted):

• Define metrics and implement security best practices to guide the organization’s security posture across multicloud environments.

• Collaborate with engineering and stakeholders to design and support secure by default enterprise and product environments.

• Develop security tooling and automation, including Nonhuman Identity (NHI) frameworks, graphbased authorization models, and contextual access control policies.

• Automate and monitor compliance pipelines to meet internal security policies and regulatory requirements.

• Apply reliability engineering to maintain availability, performance, and stability of identity services.

• Implement and support federated identity brokerage, dynamic credential management, and internal identity governance pipelines using Terraform and GitHub Actions.

• Design and maintain centralized access policies and scale identity services across internal systems and cloud environments.

• Create selfservice identity provider workflows and automate access controls to reduce auditing needs.

• Develop security tools and cloud native applications using Go and/or Python and support production deployments.

• Participate in on call rotations for infrastructure incidents and contribute to industry knowledge through conference participation and publications.

• Utilize: Identity and Access Management (IAM) - Active Directory (AD), OpenID Connect (OIDC), OAuth 2.0, Python, Go, Amazon Web Services (AWS), Typescript, React, Non-Human Identity (NHI) frameworks, AWS CloudWatch.

Required: Bachelor’s degree or equivalent in Computer Science, Engineering or related and two (2) years of experience as a Security Engineer, Software Engineer or related. Two (2) years of experience must include utilizing Identity and Access Management (IAM) - Active Directory (AD), OpenID Connect (OIDC), OAuth 2.0, Python, Go, Amazon Web Services (AWS), Typescript, React, Non-Human Identity (NHI) frameworks, AWS CloudWatch. $202880 to $252000 per year. Full time. AV218.

Required technical and professional expertise

Bachelor’s degree or equivalent in Computer Science, Engineering or related and two (2) years of experience as a Security Engineer, Software Engineer or related. Two (2) years of experience must include utilizing Identity and Access Management (IAM) - Active Directory (AD), OpenID Connect (OIDC), OAuth 2.0, Python, Go, Amazon Web Services (AWS), Typescript, React, Non-Human Identity (NHI) frameworks, AWS CloudWatch.

IBM is committed to creating a diverse environment and is proud to be an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, caste, genetics, pregnancy, disability, neurodivergence, age, veteran status, or other characteristics. IBM is also committed to compliance with all fair employment practices regarding citizenship and immigration status.