Principal Identity Security Engineer

• The Principal Identity Security Engineer will lead the design and evolution of Happen Bank’s enterprise identity security capabilities, helping ensure secure, scalable, and compliant access for employees, contractors, applications, cloud platforms, and non-human identities
• This role will set technical direction, drive complex cross-functional initiatives, establish engineering standards, champion the responsible adoption of AI across identity engineering, and continuously improve how identity services are designed, governed, and operated across the bank
• Set the technical direction, architecture, and engineering standards for Happen Bank’s identity security ecosystem across identity governance, authentication, authorization, directory services, privileged access, and non-human identity, establishing reference architectures and reusable patterns that improve security, reliability, and scalability
• Design and deliver scalable identity solutions across SailPoint, Okta, Active Directory, AWS, Terraform, and GitHub, staying hands-on in architecture, automation, integrations, and troubleshooting when needed
• Own the design and operation of privileged access management on Delinea (Thycotic) Secret Server, including vaulting, secret rotation, discovery, session controls, and privileged account lifecycle across the enterprise
• Build automation, APIs, and Infrastructure-as-Code — and establish AI-assisted engineering workflows — that improve provisioning, access governance, lifecycle management, and engineering quality while maintaining appropriate security, governance, and regulatory controls
• Define and mature non-human identity (NHI) capabilities, including service accounts, workload identities, machine identities, secrets integrations, ownership, lifecycle governance, and access controls
• Lead complex identity initiatives from strategy through implementation, partnering with Security, Infrastructure, Risk and Internal Audit to support examinations, control design, remediation, and sustainable resolution of identity-related findings
• Evaluate emerging identity security capabilities — including phishing-resistant authentication, Zero Trust, and identity threat detection and response — and set standards for the responsible adoption of AI across identity engineering
• Raise the technical bar of the identity function through mentorship, design reviews, vendor evaluations, and proof-of-concept initiatives

Benefits

• Untracked vacation for salaried employees, which means take it when you need it, and generous paid time off for hourly team members
• A hybrid work model that balances in-office and work from home
• Leading health and safety protocols related to COVID, including complimentary at-home testing kits from Cue Health for those coming to the office
• Up to 16 weeks paid leave for new parents, plus a fully paid, phased return-to-work policy for qualified leaves
• Mothers Rooms and hospital-grade pumps in every LC office
• Generous and varied mental health benefits
• Wellness program with cash incentives — earn up to $75 per month for being active
• Paid volunteer time and donation matching
• Onsite gym, locker room, bike room, and fitness classes (depending on location)
• Café with our own in-house barista
• Stocked pantries with healthy snacks and drinks
• Technology-forward and collaborative office spaces- Ability to make and defend sound technical decisions when security, regulatory, operational, and business requirements compete
• Strong hands-on experience with SailPoint or another enterprise IGA platform, Okta, Active Directory, AWS identity services, Terraform, GitHub, and identity automation
• Experience building automation through scripting, Infrastructure-as-Code, AI-assisted development practices, and sound software engineering principles
• You take ownership of outcomes, not just deliverables, and proactively identify opportunities to improve identity security, engineering quality, and operational resilience
• Experience working in a highly regulated environment and supporting regulatory examinations, audits, control assessments, and remediation activities
• 10+ years of experience in identity and access management (IAM), Information Security or Security Engineering; bachelor’s degree in a related field; or equivalent work experience
• Proven experience designing enterprise-scale identity architectures and leading complex technical initiatives through ambiguity, competing priorities, and cross-functional dependencies
• Strong understanding of SOX, FFIEC, OCC, PCI DSS, NIST, least privilege, segregation of duties, control design, and audit evidence requirements
• Deep expertise in identity security principles, including identity lifecycle management, identity governance and administration, authentication, authorization, access certification, privileged access, and non-human identity
• Demonstrated ability to mentor engineers, improve technical standards, influence senior stakeholders, and drive organizational change without direct authority
• Hands-on production experience with enterprise privileged access management, ideally Delinea (Thycotic) Secret Server — including vaulting, rotation, discovery, and privileged account lifecycle
• You understand how to apply AI to complex, high-stakes identity security work—not just to improve efficiency, but to improve engineering quality, accelerate delivery, and unlock better business outcomes. You establish a high bar for responsible AI adoption by considering data integrity, security, model limitations, privacy, and regulatory requirements, and you continuously evolve engineering practices by building new AI-enabled workflows rather than simply automating existing ones
• Experience designing non-human identity or machine identity programs at scale
• Experience designing identity, authorization, and governance controls for AI agents, including identity guardrails, least-privilege access, and policy enforcement
• Experience with cloud identity and workload identity patterns in AWS or comparable cloud environments
• Experience evaluating identity technologies and leading vendor selection or proof-of-concept initiatives