Senior Security Engineer, Identity and Access Management

About the role

HackerOne is a global leader in Continuous Threat Exposure Management (CTEM). The HackerOne Platform unites agentic AI solutions with the ingenuity of the world’s largest community of security researchers to continuously discover, validate, prioritize, and remediate exposures across code, cloud, and AI systems. Through solutions like bug bounty, vulnerability disclosure, agentic pentesting, AI red teaming, and code security, HackerOne delivers measurable, continuous reduction of cyber risk for enterprises. Industry leaders, including Anthropic, Crypto.com , General Motors, Goldman Sachs, Lufth

Requirements

• 5+ years of experience in identity and access management, security engineering, or software engineering with substantial ownership of identity systems
• Hands-on experience operating an enterprise identity provider such as Okta, including SAML, OIDC, SCIM, and lifecycle automation
• Experience managing identity across an enterprise SaaS estate such as Google Workspace, Salesforce and Workday, including SCIM provisioning and group-driven entitlements
• Experience with cloud IAM, ideally AWS, including policy design and short-lived credentials
• Strong software engineering fundamentals with proficiency in Python, Go, or a similar language, and hands-on use of AI and LLM tooling and agentic coding tools in production engineering work
• Identity work in a regulated sector such as financial services, healthcare, or government, and producing access control evidence for audit against requirements such as PCI DSS, HIPAA, SOC 2, or ISO 27
• Managing identity infrastructure as code, and access request or governance tooling, for example Terraform and Lumos
• Mobile device management (MDM) alongside identity, for example Kandji integrated with Okta: device trust policies, platform SSO, and endpoint enrollment