Favicon of GEICO

Senior Engineer, Identity and Access Management

at GEICO

Role Overview

We are seeking an experienced Engineer to play a pivotal role in ensuring the security and efficiency of our digital infrastructure. The ideal Identity Governance Administration (IGA) Engineer proactively and holistically leads and supports Identity Governance activities that guide the design, development, and security of identities in the cloud and on-prem. You will work across the organization to provide a frictionless experience for customers while maintaining the highest standards of compliance, protection, and availability. This role involves delivering high-quality technology products and services in a hyper-growth environment where priorities shift quickly, requiring broad and deep technical knowledge of Identity Lifecycle and Directory Services solutions.

Responsibilities

  • Scope, design, and build scalable, resilient Identity Governance solutions.
  • Implement Identity and Access Management requirements, such as SOD, RBAC, JIT, and Zero Trust.
  • Engage in cross-functional collaboration throughout the entire project lifecycle with security, compliance, and application groups.
  • Participate in design sessions and technology reviews with peers to elevate engineering quality.
  • Perform routine operational tasks to ensure availability while maintaining least privilege and privileged access management (PAM).
  • Develop and maintain professional-level system design, processes, and program documentation for IAM.
  • Stay at the forefront of emerging identity trends and technologies to enhance data protection strategies.
  • Provide technical guidance and mentorship to the team, fostering a culture of innovation and continuous improvement.
  • Build resilient and scalable architecture, driving innovation and cost efficiency.

Qualifications

  • Experience with identity governance platforms such as Sailpoint, Saviynt, or Okta, including identity lifecycle management, access certification, and entitlement management.
  • Experience with the implementation of identity lifecycle processes, such as provisioning, de-provisioning, and access reviews.
  • Experience developing workflows for joiner, mover, and leaver scenarios and automating identity tasks.
  • Deep understanding of security protocols and products: Active Directory, Kerberos, LDAP, SAML, OAuth, and OIDC.
  • Experience integrating identity governance platforms with systems such as ServiceNow, Workday, Oracle, and cloud platforms (AWS and Azure).
  • Fluency in DevOps concepts, Cloud Architecture, and the Software Development Lifecycle (SDLC).
  • Knowledge of developer tooling across the SDLC (task management, source code, building, deployment, operations).
  • Experience with micro-services oriented architecture and extensible REST APIs.
  • Fluency in at least one modern language such as Java, Go, or Python.
  • Proficiency in scripting languages such as PowerShell, Perl, or Bash.
  • Strong problem-solving abilities and a proactive approach to identifying and mitigating security risks.

Experience and Education

  • 4+ years of experience in developing Identity Governance and Access Management solutions for large enterprises at scale.
  • 3+ years of experience with architecture and design.
  • 3+ years of experience with AWS, GCP, Azure, or another cloud service.
  • 2+ years of experience in open-source frameworks is desired.
  • Bachelor’s degree in Computer Science, Information Systems, or equivalent education or work experience.
  • Sponsorship for employment authorization is available for qualified applicants.

Benefits

  • Comprehensive Total Rewards program including medical, dental, and vision coverage.
  • 401(k) savings plan vested from day one with a 6% match.
  • Performance and recognition-based incentives.
  • Tuition assistance and certification assistance.
  • Access to mental healthcare, fertility, and adoption assistance.
  • Workplace flexibility including the Flex program, which offers the ability to work from anywhere in the U.S. for up to four weeks per year.
  • Personalized development programs, career mentorship, and coaching.
Required Skills:
OktaSailPointSaviyntSAMLOAuth 2.0OpenID Connect (OIDC)LDAPKerberosActive DirectoryLDAP Directories
Benefits:
401k matchingTuition reimbursementHealth insuranceDental & visionBonus eligibleWellness stipendRemote flexibilityLearning budget

Share:

Promote
  • Location


    Bethesda, US
  • Salary


    $100K to $220K per year
  • Job Type


    Full Time
  • Work Mode


    Onsite
  • Experience


    Mid Level
  • Posted


    Jun 17, 2026
Ad
Favicon

 

  
 
Visit GEICO