Senior Security Engineer, Identity and Access Management
HackerOne · San Francisco, CA; Seattle, WA; Austin, TX; Washington, DC; Boston, MA
About the role
A senior security engineer building out IAM at HackerOne as an engineering discipline rather than an admin function, with AI at its core. The engineer owns joiner-to-leaver identity for staff, service accounts and AI agents alike, designs access models driven by data classification, makes expiring access the norm for sensitive data, manages Okta, Lumos and AWS IAM configuration as code, builds LLM tooling for continuous access review and anomaly detection, and acts as identity responder during incidents.
HackerOne wants five or more years in IAM or security engineering with real ownership of identity systems, hands-on Okta, SAML, OIDC and SCIM experience across a SaaS estate, AWS IAM policy design, and Python or Go with production use of AI coding tools. Remote within about 50 miles of the listed cities; no visa sponsorship.