Principal Security Engineer Identity & Access Management

For our client, we are seeking a Principal Security Engineer Identity & Access Management to join the team of a leader in the Media space. This role will lead technical work focused on secure, reliable systems and risk-aware execution. You will work across engineering, product, operations, and business stakeholders to translate complex requirements into practical technology solutions. The position offers the opportunity to influence architecture, execution quality, and the technology capabilities that enable long-term growth within a Media environment. Location: Remote - US based candidates only, no visa sponsorship available Compensation: $120,000 – $160,000 annually Responsibilities Architect and maintain internal workforce identity and redesign customer-facing identity as appropriate Create secure, modern authentication protocols and enhance MFA to resist phishing Collaborate on designing automated user provisioning and offboarding processes Integrate privileged identity platforms with Active Directories and third-party applications Define RBAC and ABAC models to ensure compliance with data privacy laws Mentor engineers on identity-first security best practices Qualifications 7+ years in IT/Security, with 4+ years in IAM architecture Hands-on experience with modern IDP & PAM solutions (e.g., Okta, Ping Identity) Proficient in directory services (LDAP, AD) and scripting (PowerShell, Python) Strong understanding of TLS, SSO, SAML, OAuth2, and OIDC protocols Bachelor’s degree in Computer Science or equivalent experience Benefits Remote First work environment promoting flexibility and work-life balance Reimbursement for remote office setup costs Supportive and inclusive corporate culture promoting unique backgrounds and ideas Our client is an equal opportunity employer. We encourage you to apply even if you don’t meet every qualification—your background could be exactly what this team needs.