Remote opportunity at
HackerOneSenior Security Engineer, Identity and Access Management
HackerOne is recruiting a Senior Security Engineer to build its identity and access management capability. The company is taking an AI-first, engineering-led path with less emphasis…
Career Tools
About This Role
HackerOne is recruiting a Senior Security Engineer to build its identity and access management capability. The company is taking an AI-first, engineering-led path with less emphasis on manual administration. This is a remote job for people living roughly 50 miles from Austin, Seattle, Washington DC, San Francisco or Boston, or who can commute to the London or Netherlands offices. The engineer takes end-to-end responsibility for the identity lifecycle, covering onboarding,…
Job Description
HackerOne is recruiting a Senior Security Engineer to build its identity and access management capability. The company is taking an AI-first, engineering-led path with less emphasis on manual administration. This is a remote job for people living roughly 50 miles from Austin, Seattle, Washington DC, San Francisco or Boston, or who can commute to the London or Netherlands offices.
The engineer takes end-to-end responsibility for the identity lifecycle, covering onboarding, changes and offboarding for staff, service accounts and autonomous AI agents. Access models are built around the classification of data, so reach follows what the information is. Time-limited access becomes the norm for sensitive data, and provisioning rules, entitlement logic and review criteria are maintained as versioned, tested code.
The role also includes creating AI and LLM-based systems that check access and surface unusual entitlements in real time instead of during periodic audits. Non-human identities each receive a named owner, a stated purpose and a fixed end date. Excess permissions are measured so the biggest reductions come first. The engineer works alongside the engineering, enterprise IT and compliance groups and helps respond to identity-related security incidents.
Candidates should bring five-plus years across identity, security or software engineering, including hands-on Okta work, including its SAML, OIDC and SCIM standards. Experience administering identity across SaaS suites like Google Workspace, Salesforce and Workday is expected, as are cloud IAM skills (AWS preferred) and proficiency in Python or Go. Useful extras include regulated-industry experience, Terraform and certifications such as CISSP. For Seattle or Washington DC, the posted range is 180,000 to 220,000 dollars, with equity options.
Responsibilities
- Run the full identity lifecycle across humans, service accounts and AI agents
- Design access rules driven by the classification of data
- Default to time-bound access for critical systems
- Keep provisioning, entitlement and access-review logic versioned and tested across Okta, Lumos and AWS IAM
- Build AI and LLM tooling that detects entitlement anomalies continuously
- Give every non-human identity a named owner, a clear purpose and a set expiry date
- Quantify excess access and rank reduction work by impact
- Act as the identity lead during detection and response, including containment and reconstruction of access
Requirements
- Five or more years in IAM, security or software engineering, including deep work owning identity platforms
- Hands-on Okta operations, including SAML, OIDC, SCIM and automated lifecycle processes
- Experience managing identity across SaaS tools including Google Workspace, Salesforce and Workday, with group-based access
- Cloud IAM knowledge, ideally AWS, including sound policy writing and temporary credential handling
- Solid engineering skills in Python, Go or comparable languages
- Practical use of AI and LLM tools and coding agents in production work
Qualifications
- Identity work in regulated fields such as finance, healthcare or government
- Producing audit evidence for frameworks such as SOC 2 or ISO 27001
- Managing identity infrastructure as code with Terraform, or access-request tools such as Lumos
- Device trust and mobile management tied to identity, such as Kandji with Okta
- Secrets handling and service-to-service authentication
- Credentials such as CIDPRO, Okta certifications, AWS Security Specialty or CISSP
Core Skills
Benefits
- Medical, vision and dental coverage, plus life and disability insurance (eligibility varies by country)
- Equity in the form of stock options
- Retirement plans
- Public holidays and unlimited PTO
- Paid leave for new parents, including maternity leave
- Leave options, including caregiver leave
- Employee Assistance Program
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Where can candidates live for this remote role?
The role targets candidates within about 50 miles of Austin, Seattle, Washington DC, San Francisco or Boston, or within commuting distance of the London or Netherlands locations.
What is the pay range?
For Seattle or Washington DC the posting lists 180,000 to 220,000 dollars, with equity options.
What experience is required?
The posting asks for five or more years across identity and access management, security or software engineering, including hands-on Okta experience.
Does HackerOne sponsor visas?
The posting says visa or work permit sponsorship is not offered.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.
