Senior hands-on engineering role focused on designing, operating, and modernizing enterprise-scale Public Key Infrastructure (PKI) and cryptographic services across cloud and hybrid environments.
The Cybersecurity Engineer III, Identity and Access Management (IAM), is a hands‑on engineer on Upbound’s IAM team who secures how coworkers, contractors, applications, and AI agents sign in and what they can reach.
Responsibilities
Manage Microsoft Entra ID tenant environments and workforce sign‑in
Own identity lifecycle automation and access governance
Connect applications to single sign‑on and automated provisioning
Manage privileged access in Microsoft Entra ID and Azure
Govern non‑human identities
Requirements
Nice to have: integrating identity platforms with HR systems
Nice to have: securing workload and AI agent identities in Azure, AWS, or Google Cloud
Nice to have: managing and integrating PAM solutions into identity workflows
Nice to have: certifications such as SC-300, AZ-500, CISSP, or CCSP
This role is focused on designing, developing, configuring, and supporting customer identity and authentication solutions leveraging the Transmit Security and Mosaic Platforms.
Locations (2)
Brooklyn, Ohio, United States
United States
Compensation
$100.00 - $120.00 per hour
Responsibilities
Design and implement authentication and identity management solutions using Transmit Security
Build and maintain customer identity journeys, registration flows, login flows, MFA enrollment, and account recovery processes
Integrate Transmit Security APIs and SDKs into web and mobile banking applications
Configure identity orchestration workflows and adaptive authentication policies
Support passkey and passwordless authentication initiatives
Requirements
Bachelor's degree in Computer Science
Information Systems
Principal, Enclave Systems & Support Administrator
Designs, builds, hardens, and operates the technical enclave, configuring identity, endpoints, data-protection controls, and FIPS-validated cryptography, while delivering tier-1 through tier-3 support.
Locations (2)
Washington, District of Columbia, United States
West Virginia, United States
Compensation
The typical base pay range for this role across the U.S. is USD $133,400.00 - $226,800.00 per year.
Responsibilities
Administer Google Workspace Enterprise Plus
Build and operate ChromeOS / Chrome Enterprise endpoints and Amazon WorkSpaces (AWS GovCloud) Windows VDI
Configure SAML SSO with FIDO2 phishing-resistant authentication
Establish and maintain hardened configuration baselines
Run change management
Requirements
Bachelor's degree or higher in cyber security
Bachelor's degree or higher in computer science/engineering
Bachelor's degree or higher in management of information systems
Principal Customer Identity Access Management (CIAM) Architect responsible for technical architecture and strategic leadership of Citizens' CIAM platform.
Locations (6)
Johnston, Rhode Island, United States
Boston, Massachusetts, United States
Marlton, New Jersey, United States
Phoenix, Arizona, United States
Irving, Texas, United States
Workforce Identity and Directory Services, VP - Enterprise Technology
Build Gravitee's core products and next-generation product surface in Gamma, focusing on API Management, Access Management, or Event Gateway for Kafka.
Compensation
Salary: $180,000
Responsibilities
Design and deliver features end to end, from technical design through implementation, testing, release, and iteration
Build and evolve Java services and APIs, including performance-sensitive, asynchronous code in the runtime
Contribute to the customer experience in the Gamma console, across backend APIs and TypeScript and Angular interfaces
Keep security behavior and upgrades safe: secure defaults, certificate and secret handling, audit logs, safe migrations, and backward compatibility
Own US-hours Level 3 and Level 4 escalations for your product as part of the L3 pager duty rotation
Requirements
Nice to have: reactive Java (Vert.x, RxJava, Netty)
Nice to have: API gateway, proxy, or service-mesh vendor or platform team (Kong, Google Apigee, MuleSoft, Tyk, Solo.io, Traefik, WSO2)
Seeking a Senior Solutions Architect to contribute to architectures, patterns, and standards for the Identity Experience project, focusing on enabling a new Customer Identity and Access Management Platform for business partners.
Compensation
18 Month Max Term Salaried Contract
Responsibilities
Define solutions architectures, patterns, standards, high-level designs, and impact assessments for initiatives and/systems.
Take ownership of Architecture deliverables for Conceptual and Solution Architecture documents and ensure they are agreed and endorsed by all stakeholders.
Work with analysts in defining business requirements and work with subject matter experts to develop high level designs in line with enterprise architecture, patterns, and practices.
Collaborate and provide technical leadership and consultancy with project managers and impacted business stakeholders in scoping initiatives.
Identify and document dependencies with other projects/systems.
Requirements
Tertiary qualifications relevant to the Bank or IT industry
Technical expert in modern Identity & Access Management (IAM) systems within a hybrid model, focusing on Active Directory, Microsoft Entra ID, ADFS, and security protocols.
Responsibilities
Act as a technical expert in modern Identity & Access Management systems
Troubleshoot and resolve complex issues across IAM technologies
Apply ITIL best practices to incident, change, and problem management
Maintain awareness of developments in the IT industry
Develop relationships with clients and customers
Requirements
Undergraduate degree in Computing
Information Technology
related technical discipline
Nice to have: Microsoft Identity Manager (MIM)
Nice to have: Microsoft Entra ID User Provisioning
The salary range for this position is $170,000 to $210,000 per year, plus an opportunity to earn additional incentive earnings.
Responsibilities
Define and evolve the target state architecture for Citizens' Customer Identity and Authentication ecosystem.
Establish enterprise architecture patterns and technical standards for customer authentication, authorization, federation, identity orchestration and identity lifecycle services.
Develop architecture supporting modern authentication capabilities including Passkeys, Passwordless Authentication, Multifactor Authentication, Adaptive Authentication, Risk Based Authentication and Identity Federation.
Provide architectural leadership across CIAM platforms and technologies including Ping Identity, ForgeRock, Okta, Auth0, Microsoft Entra ID or comparable enterprise identity platforms.
Define architecture patterns using OAuth 2.0, OpenID Connect, SAML, SCIM, FIDO2, WebAuthn and related identity standards.
Requirements
Nice to have: Financial Services
Nice to have: Banking
Nice to have: Payments
Nice to have: Highly Regulated Industry Experience