> Markdown version of [/jobs/ext/157459-sr-staff-identity-and-access-management-engineer](https://www.wearedevelopers.com/jobs/ext/157459-sr-staff-identity-and-access-management-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Sr Staff Identity and Access Management Engineer

- **Company:** GEICO
- **Location:** Seattle, WA, United States
- **Experience:** Expert
- **Salary:** $120,000.0 - $260,000.0
- **Contract:** Permanent contract
- **Skills:** Active Directory, Amazon Web Services, Application Frameworks, Microsoft Azure, Software as a Service, Cloud Engineering, Information Systems, Continuous Delivery, Data Centers, Data Security, Software Design Patterns, DevOps, Programming Tools, Cryptographic Protocols, Identity and Access Management, Python (Programming Language), Kerberos (Protocol), Lightweight Directory Access Protocols (LDAP), OAuth, OpenID, X.509, Cloud Services, Security Assertion Markup Language (SAML), Software Engineering, WebRTC, Advanced Encryption Standard (AES), Transport Layer Security, Google Cloud, Information Technology, Restful APIs, Microservices
- **Published:** May 29, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=373d78b7754f2fe4

## About the Role

Do you have experience in Team management?, Do you have a Bachelor's degree?, * Experience building the architecture and design (architecture, design patterns, reliability, and scaling) of new and current systems

 * Fluency in DevOps Concepts, Cloud Architecture, and the Software Development Lifecycle

 * Experience in security protocols and products: Understanding of Active Directory, Kerberos, LDAP, SAML, OAuth, and OIDC
 * Experience with continuous delivery and infrastructure as code
 * Knowledge of developer tooling across the software development life cycle (task management, source code, building, deployment, operations, real-time communication)
 * Experience with micro-services oriented architecture and extensible REST APIs
 * In depth knowledge of Datacenter structure, capabilities, and offerings, including the Azure platform, and its native services including the Azure platform and its native services
 * Fluency and specialization with at least one modern language such as Java, Go, or Python
 * In depth expertise in cryptographic protocols, digital certificates, and encryption standards such as X.509, Transport Layer Security (TLS), and Advanced Encryption Standard (AES)
 * Strong problem-solving abilities and a proactive approach to identifying and mitigating security risks and vulnerabilities
 * Excellent communication skills, able to communicate complete technical concepts to technical and non-technical stakeholders, * 10+ years of professional experience in technology or identity engineering
 * 8+ years of experience with security, identity, architecture, and design
 * 4+ years of experience with open-source frameworks is desired
 * 4+ years of experience with AWS, GCP, Azure, or another cloud service
 * 1+ years of people management experience, * Bachelor's degree in computer science, Information Systems, or equivalent education or work experience

## Description

GEICO is seeking an experienced Engineer with a passion for building high performance, minimal maintenance, zero-downtime platforms, and applications. You will help drive our insurance business transformation as we transition from a traditional IT model to a tech organization with engineering excellence as its mission., Our Senior Staff Engineer is a key member of the engineering staff, working across the organization to provide friction-less experience for our customers and maintain the highest standards of compliance, protection and availability. You will be part of a team that thrives and succeeds in delivering high quality technology products and services in a hyper-growth environment where priorities shift quickly. The ideal candidate has broad and deep technical knowledge of the Identity Directory Services and solutions that ensure secure authorization to GEICO's data assets., As a Senior Staff Engineer, you will:

 * Lead execution and adoption of modern authentication and authorization mechanisms (SAML, OIDC/OAUTH2)
 * Engage peers and leaders at all levels.
 * Consistently share best practices and improve processes within and across teams
 * Determine and support resource requirements, evaluate operational processes, measure outcomes to ensure desired results, and demonstrate adaptability and sponsoring continuous learning
 * Own the complete project lifecycle for application integrations of both on-premises and SaaS applications with our IGA platform.
 * Collaborate with application team to implement tokenization solutions that reduce sensitive data exposure, thereby enhancing data security and minimizing the risk of unauthorized access
 * Stay at the forefront of emerging identity trends, technologies, and best practices, and apply this knowledge to enhance GEICO's data protection strategies
 * Provide technical guidance and mentorship to the team, fostering a culture of innovation, collaboration, and continuous improvements
 * Collaborate with cross-functional teams, including security, compliance, and application teams to ensure the seamless integration and alignment of solutions with organizational goals
 * Build resilient and scalable architecture, driving innovation and cost efficiency, Great Rewards: We offer compensation and benefits built to enhance your physical well-being, mental and emotional health and financial future.
 * Comprehensive Total Rewards program that offers personalized coverage tailor-made for you and your family's overall well-being.
 * Financial benefits including market-competitive compensation; a 401K savings plan vested from day one that offers a 6% match; performance and recognition-based incentives; and tuition assistance.
 * Access to additional benefits like mental healthcare as well as fertility and adoption assistance.
 * Supports flexibility- We provide workplace flexibility as well as our GEICO Flex program, which offers the ability to work from anywhere in the US for up to four weeks per year.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Transforming Education: A Journey from interactive Markdown to Remote-Labs](https://www.wearedevelopers.com/videos/941-transforming-education-a-journey-from-interactive-markdown-to-remote-labs)
- [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect)
- [Our GitOps approach for deploying an Identity Provider and an API Gateway in a SaaS company](https://www.wearedevelopers.com/videos/776-our-gitops-approach-for-deploying-an-identity-provider-and-an-api-gateway-in-a-saas-company)
- [Hello JARVIS - Building Voice Interfaces for Your LLMS](https://www.wearedevelopers.com/videos/1641-hello-jarvis-building-voice-interfaces-for-your-llms)
- [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue)

## Related Articles

- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)
- [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers)
- [Dev Digest 129 - Now that's what I call private data!](https://www.wearedevelopers.com/magazine/468-dev-digest-129-now-that-s-what-i-call-private-data)