RemoteLeaf Logo
Log in Sign up

Principal Identity Engineer

3 hours, 11 minutes ago
United States
Full-time
Lead
Security Engineer
DevOps and Infrastructure
Active Directory CI/CD Git OpenID Connect PowerShell Pulumi Python REST API SAML Terraform
Apply Now
Hasbro

Hasbro

Hasbro (NASDAQ: HAS) is a global play and entertainment company committed to creating the world's best play and entertainment experiences. They offer a wide range of products and services including toys, games, consumer products, television, movies, di...

Consumer Goods
5K-10K
Founded 1923
$27M raised
View All Jobs 19

Description

  • Serve as the principal technical architect for the Identity portfolio, owning end-to-end design across identity providers, privileged access, and identity governance.
  • Architect and advance the Zero Trust Identity program for secure conditional access across cloud and on-premises resources.
  • Lead consolidation of identity providers across Okta Identity Cloud, Microsoft Entra ID, and AWS IAM Identity Center.
  • Own the architecture and expansion of CyberArk privileged access management, including workflows, vaulting, and session controls.
  • Drive maturity of Saviynt identity governance, including RBAC, separation of duties, access certification, and JML automation.
  • Architect Active Directory modernization and cloud integration while preserving operational continuity.
  • Define and govern the Studio Identity & Resource Architecture (SIRA) group model and non-employee identity lifecycle.
  • Partner with Network Engineering on Palo Alto Cloud Identity Engine integration for identity-aware network and threat-response decisions.
  • Design, build, and maintain production-grade identity automation services, custom connectors, and orchestration workflows.
  • Lead architectural design for identity systems and integrations through reference architectures, design documents, and technical specifications.
  • Build and own API-level integrations using REST, SCIM, SAML, and OIDC to replace manual identity operations with code-first solutions.
  • Apply AI and automation to access reviews, certification workflows, anomaly detection, and policy/log/code analysis.
  • Champion Infrastructure-as-Code for identity platform configuration using tools such as Terraform or Pulumi.
  • Establish identity engineering standards, reference architectures, and automation patterns for the broader Core Platform organization.
  • Mentor senior and mid-level identity engineers while remaining a hands-on technical contributor.

Requirements

  • 10+ years of progressive experience in identity and access management, security engineering, or platform engineering.
  • Demonstrated principal-level technical ownership.
  • Hands-on experience with Okta Identity Cloud and Microsoft Entra ID.
  • Experience designing and implementing Zero Trust identity architectures across hybrid cloud and on-premises environments.
  • Strong CyberArk architecture and implementation experience.
  • Experience maturing identity governance programs, including Saviynt, RBAC, separation of duties, access certification, and JML automation.
  • Solid understanding of AWS IAM Identity Center and cloud identity in multi-account environments.
  • Experience with Active Directory modernization, Entra ID conditional access, and federation across enterprise applications.
  • Solid coding or scripting ability in Python, PowerShell, or similar, with comfort building and maintaining automation and integrations.
  • Experience contributing to architectural design, including writing design docs and evaluating build-vs-buy trade-offs.
  • Working knowledge of API design and integration patterns, including REST, SCIM, SAML, and OIDC.
  • Track record of leading security-critical remediation work under incident-response pressure.
  • Excellent communication skills for influencing technical direction and explaining trade-offs to technical and executive audiences.
  • Hands-on experience with Palo Alto Cloud Identity Engine or comparable network-identity integration (preferred).
  • Experience governing identity in a multi-studio, multi-brand, or holding-company environment (preferred).
  • Relevant certifications such as Okta Certified Professional/Consultant or Microsoft Identity and Access Administrator (preferred).
  • Experience with infrastructure-as-code and automation frameworks applied to identity workflows (preferred).

Benefits

  • Pay range of $172,600–$259,000 USD.
  • Eligibility for annual and long-term incentives.
  • Medical, dental, and vision insurance.
  • Paid vacation time and holidays.
  • Generous 401(k) match.
  • Paid parental leave.
  • Volunteer program and employee giving/matching gifts programs.
  • Tuition reimbursement and product discounts.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Dragos

Senior Device Engineer

Dragos 251-1K Professional Services

Dragos is hiring a Senior Device Engineer to build automation software that identifies, fingerprints, and interacts with network-connected devices across critical infrastructure environments.

United States Full-time Senior Embedded Systems Engineer Security Engineer
$165k-$165k
Cybersecurity Docker Embedded Systems Go HTTP JavaScript Node.js TCP/IP TLS TypeScript
3 hours, 11 minutes ago
Jolera

Elastic Engineer

Jolera 251-1K Internet Software & Services

Jolera is seeking an Elastic Engineer to design and operate scalable Elasticsearch-based environments for cybersecurity analytics, threat hunting, and detection workflows.

India Full-time Senior DevOps Engineer Security Engineer
Cybersecurity Elasticsearch Encryption Java Kibana Linux Logstash Machine Learning Python Ruby
3 hours, 41 minutes ago
BeyondTrust

Staff Software Development Engineer - Windows Endpoint

BeyondTrust 1K-5K Professional Services

BeyondTrust is hiring a Staff Software Development Engineer to own Windows kernel-mode enforcement for its Identity Security Platform, building real-time security controls that decide whether actions on Windows endpoints are permitted or denied.

United States Canada Full-time Lead Security Engineer Software Engineer
Agile C C++ Rust
3 hours, 41 minutes ago
CloudLinux

Security Engineer - Node.js Proactive Defense (worldwide remote, work anywhere)

CloudLinux 51-250 IT Services

CloudLinux is hiring an engineer-researcher to build a new runtime protection product for Node.js web apps running on managed hosting, from design through production rollout.

Poland Portugal Romania Bulgaria Spain Czech Republic Full-time Lead Research Scientist Security Engineer
JavaScript Node.js PHP WAF WordPress
4 hours, 11 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers