Senior Security Engineer, Identity

Ramp

. Own Terraform for identity services, including Okta applications, authorization servers, authentication policies, groups and group rules, and SCIM provisioning .

Posted 11/6/2026full-timeNew York City • New York • United StatesSenior💰 $175,200 - $240,900 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in Identity Engineering and IAM, with a strong focus on managing Okta and equivalent identity providers. Proficient in Terraform, OAuth 2.0, OIDC, SAML, and SCIM, with a proven ability to design and operate custom authorization servers and IGA platforms.

Highest-signal resume keywords

Identity EngineeringOkta ManagementTerraform ExperienceOAuth 2.0 ExpertiseIGA Platform Ownership

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

TerraformOAuth 2.0OIDCSAMLSCIMPython ProgrammingGo ProgrammingISPM ToolingXAAID-JAG

Tools & Technologies

OktaIdentity Graph ToolingIGA Platform

Industry Keywords

Identity Access ManagementAuthorization ServersAccess PoliciesEntitlement CatalogAccess Requests

Tech Stack

Tools & technologies

PythonTerraformGo

About the role

Key responsibilities & impact

Own Terraform for identity services, including Okta applications, authorization servers, authentication policies, groups and group rules, and SCIM provisioning
Design and operate custom authorization servers with audiences, scopes, claims, and access policies for internal services and AI agents
Implement app-to-app and agent access through Cross App Access (XAA) and ID-JAG
Own the IGA platform, including entitlement catalog, ownership, access requests, time-bound grants, and certifications
Build an agentic workflow that converts access needs into defined, owned, and governed entitlements, with Terraform and IGA changes opened for review
Build identity graphs with ISPM tooling to identify overprivileged and long-standing access across human and non-human identities
Build the identity data lake behind an on-call agent that explains Okta access events
Report to the Corporate Security lead and collaborate with IT, Security Engineering, AI DevX, and the Data team

Requirements

What you’ll need

6+ years in identity engineering or IAM, including operational ownership of Okta or an equivalent identity provider at scale
Deep understanding of OAuth 2.0, OIDC, SAML, and SCIM, including how custom authorization servers issue and enforce aud, scope, and claims
Working knowledge of XAA and ID-JAG, including token exchange and JWT bearer grants
Experience with ISPM or identity graph tooling, and turning findings into automated remediation
Experience owning an IGA platform or building the equivalent in-house
Terraform experience managing identity providers, including module design, state, and CI
Programming in Python or Go, with experience building against platform APIs

Benefits

Comp & perks

Flexible PTO
Centralized home-office equipment ordering
Health and wellness stipend
Budget for intra-office travel
Weekly coffee stipend
100% medical, dental & vision insurance coverage for you, with partial coverage for dependents
One Medical annual membership
401(k), including employer match on contributions made while employed by Ramp
Fertility HRA (up to $10,000 per year)
Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay
Pet insurance
In-office perks: lunch, snacks, drinks, and more
Relocation expense coverage to NYC or SF (if needed)
Group medical, dental, and vision coverage through Sun Life
Life, AD&D, and disability coverage
Fertility drug coverage (up to $4,000 lifetime)
Group Retirement Plan with employer match (RRSP + DPSP)
Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay, with additional time available at reduced pay
Employee Assistance Program and virtual care through Lumino Health
Private medical insurance through Freedom Elite
Virtual GP and at-home care via eMed x Livi
Workplace pension through Penfold, with salary sacrifice option
Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay with additional time available at reduced pay