International Business Machines Corporation
Senior Security Engineer
Hybrid · Armonk, NY
About the role
Employer: IBM
Senior Security Engineer, IBM Corporation, Armonk, NY and various unanticipated client sites throughout the US (Up to 100% telecommuting permitted):
* Define metrics and implement security best practices to guide the organization’s security posture across multicloud environments.
* Collaborate with engineering and stakeholders to design and support secure by default enterprise and product environments.
* Develop security tooling and automation, including Nonhuman Identity (NHI) frameworks, graphbased authorization models, and contextual access control policies.
* Automate and monitor compliance pipelines to meet internal security policies and regulatory requirements.
* Apply reliability engineering to maintain availability, performance, and stability of identity services.
* Implement and support federated identity brokerage, dynamic credential management, and internal identity governance pipelines using Terraform and GitHub Actions.
* Design and maintain centralized access policies and scale identity services across internal systems and cloud environments.
* Create selfservice identity provider workflows and automate access controls to reduce auditing needs.
* Develop security tools and cloud native applications using Go and/or Python and support production deployments.
* Participate in on call rotations for infrastructure incidents and contribute to industry knowledge through conference participation and publications.
* Utilize: Identity and Access Management (IAM) - Active Directory (AD), OpenID Connect (OIDC), OAuth 2.0, Python, Go, Amazon Web Services (AWS), Typescript, React, Non-Human Identity (NHI) frameworks, AWS CloudWatch.
Required: Bachelor’s degree or equivalent in Computer Science, Engineering or related and two (2) years of experience as a Security Engineer, Software Engineer or related. Two (2) years of experience must include utilizing Identity and Access Management (IAM) - Active Directory (AD), OpenID Connect (OIDC), OAuth 2.0, Python, Go, Amazon Web Services (AWS), Typescript, React, Non-Human Identity (NHI) frameworks, AWS CloudWatch. $202880 to $252000 per year. Full time. AV218.