← All roles

Senior Security Engineer, Identity & Access Management

Valon· Technical Infrastructure
Apply on company site
Remote$180k - $230kFull-timePosted 3mo ago

About the role

Senior Security Engineer responsible for design, implementation, and operation of Valon’s enterprise IAM stack and security for customer-facing authentication/authorization in ValonOS, acting as the bridge between IT, Engineering, and Security to govern identities securely.

Responsibilities

  • Design and support end-to-end lifecycle of workforce identity systems including identity automation, access management, and least-privilege enforcement across internal systems
  • Support design of secure identity design patterns for product teams building on ValonOS
  • Manage and evolve Valon's IdP in conjunction with IT including SSO integrations, MFA policies, conditional access rules, and directory synchronization
  • Define and enforce RBAC and group-based access policies for internal applications, cloud environments, and development tooling
  • Support privileged access management (PAM) for internal infrastructure in conjunction with Engineering teams
  • Design and build AI-assisted workflows that automate and accelerate core IAM operations
  • Evaluate AI risks across IAM pipelines, ensuring appropriate security controls around data exposure, prompt injection and other threats
  • Collaborate with Product, Engineering, Data, Compliance, Legal, and other teams to identify and drive mitigation for data security risks
  • Support other operational and on-call duties such as vulnerability management, regulatory compliance (SOC 2, CCPA, NYDFS, FTC), policy development, incident response and security reviews.

Qualifications

  • 5+ years in security engineering roles with a core focus on identity and access management
  • Bachelor's degree in Information Security, Computer Science, Technology or related field
  • Relevant security certifications (e.g., CISSP, CISM, CCSK, CCSP or similar)
  • Hands-on experience with an enterprise IdP (Okta, Entra ID, or Google Workspace) including SSO, MFA, SCIM
  • Deep understanding of authentication and authorization models across applications - SAML, OIDC/OAuth 2.0, RBAC, ABAC, and API access controls
  • Hands-on experience with modern identity security technologies and tooling

Skills

Required:IAM security engineeringSAML 2.0OIDC/OAuth 2.0SCIMIdP administration (Okta/Azure Entra ID/Google Workspace)Cloud IAM (GCP preferred)PAM / identity vaultsNon-human identity security
Nice to have:AI/LLM-powered IAM workflows

Benefits

  • Compensation: competitive salary with equity and 401(k) plan
  • Health & well-being: comprehensive medical, dental, & vision benefits
  • Free Food: daily lunch and dinner for in-office team members
  • Commuter benefits: pre-tax deductions for public transit, rideshares, and parking
  • Grow together: orientation and learning opportunities with regular reviews
  • Play together: quarterly budgets for team and company outings
  • Generous time off: flexible paid time off with no annual limit, sick days, and 11 holidays
  • Baby bonding time: 12 weeks of fully paid leave for birthing and non-birthing parents
Last updated Oct 22, 2026. Interested? Apply on the company site.

About Valon

The AI-native operating system for mortgage servicing. Building a better foundation for the American Dream.

Mortgage servicingAI-native operating systemRegulated financeRegulated workflowsPlatformValonOS
Company profileWebsite

More open roles at Valon