Senior Security Engineer - IAM
Overland Park, KS, United StatesAll locationsOverland Park, KS, United StatesKansas City, MO SOCSarasota, Florida, United StatesScottsdale, AZ, United States Hybrid
Salary not listedJobFig found this opening at its original source and checks that it remains available.
About the role
Almost every serious intrusion runs through identity at some point: a stolen token, an over-permissioned service principal, a trust relationship nobody remembered was there. It is also where defenders have the least margin for error, and where compliant and hard to attack are rarely the same thing. As Senior Security Engineer for IAM, you own that problem for TENEX and our customers. You will define what hardened identity actually looks like across Entra ID and Active Directory, Okta, and cloud IAM, take customer environments apart to find the paths an attacker would take, and back our SOC and incident responders when identity is in play. This is for someone who knows identity down to the protocol level, thinks in attack paths, and can sit across from a customer’s IAM architect and be the one who spots the risk they missed.
What you'll bring
- 7+ years deep in identity, hands-on across Entra ID and Active Directory, Okta, and cloud IAM (AWS, GCP, Azure), with real command of authentication, authorization, federation and trust, and privileged access.
- The attacker’s view of identity: how Kerberos, SAML, OAuth, and OIDC break in practice, and how a single foothold becomes privilege and then persistence.
- A track record of hardening real identity environments and getting the fixes shipped, not just writing up the gaps.
- The depth and credibility to be the authority on identity risk in any room, including across the table from a customer’s own IAM architects.
- Bachelor’s degree in Computer Science, Cybersecurity, or Engineering, or a related field (or equivalent experience).
- You can code, and you use AI to move faster: automating assessments, parsing sign-in and audit logs, and building tooling instead of doing it by hand.
- Time in an MDR, MSSP, security consulting, or a high-growth startup.
- Identity attack experience from the offensive side, or detection and IR work where identity was the story.
- Relevant certifications such as Microsoft SC-300, Okta certifications, a cloud identity or security specialty, CISSP, or an offensive cert like CRTP or OSCP are a plus.