> Markdown version of [/jobs/ext/1970597-identity-engineer](https://www.wearedevelopers.com/jobs/ext/1970597-identity-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Identity Engineer - **Company:** Capio Group - **Location:** Vancouver, WA, United States (Remote available) - **Experience:** Expert - **Salary:** $110,000.0 - $160,000.0 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, C Sharp (Programming Language), Cloud Computing Security, Cloud Engineering, Continuous Integration, Identity and Access Management, Open Web Application Security, Secure Coding, Security Information and Event Management, Workflow Management Systems, Google Cloud, Software Security, Machine to Machine Communication, Backend, Cloudformation, Azure Security Center, Enterprise Integration, CIS Benchmarks, Terraform, Security Orchestration, Automation & Response, Static Application Security Testing, Dynamic Application Security Testing - **Published:** August 7, 2026 - **Apply:** https://www.workingnomads.com/job/go/1775190/ ## About the Role * Experience designing or migrating identity architecture at scale * Experience building internal developer security tooling * Experience working in a high-growth technology environment, * 5-7+ years of experience as a Security Engineer or Software Engineer with a strong security focus * Proven experience building and operating production-grade software, systems, or internal tooling * Strong background in application security, infrastructure security, and secure CI/CD practices * Hands-on experience with identity and access management, including authentication systems, authorization frameworks, and machine-to-machine security patterns * Experience applying security frameworks such as OWASP, NIST, or CIS Controls in real-world production environments * Familiarity with cloud security tooling (AWS Security Hub, Azure Security Center, or GCP Security Command Center), SIEM/SOAR tools, and Infrastructure-as-Code security scanning (Terraform, CloudFormation) * Experience supporting compliance frameworks such as SOC 2 and ISO 27001 * Familiarity with modern backend systems (including C#) and cloud-native architectures * Demonstrated ability to collaborate cross-functionally and influence engineering teams to improve security outcomes * Strong communication skills with the ability to translate complex security concepts into clear, actionable guidance, * Driven by Impact: You deliver results that matter-prioritizing high-value work, meeting deadlines, and adapting quickly while keeping outcomes clear. * Strategic & Customer-Centric: You anticipate risks and opportunities, connect decisions to long-term growth, and build trust through proactive insights. * Curious & Growth-Oriented: You seek knowledge, ask sharp questions, and apply learnings fast-challenging the status quo with a mindset of improvement. * Collaborative & Resilient: You thrive in change by staying resourceful, solution-focused, and positive-removing roadblocks, sharing insights, and keeping morale high. * Accountable & Honest: You own your work, hold yourself and others to a high bar, and use transparent feedback to drive growth. * Emotionally Intelligent: You build trust through empathy and collaboration, foster inclusion, and inspire others with grit, optimism, and integrity. ## Description You'll partner closely with Engineering, Infrastructure, and Product teams to embed security into our CI/CD pipelines, internal platforms, and customer-facing systems-enabling teams to move quickly while keeping our systems, data, and users safe. This is a high-impact individual contributor role for someone who thinks like a defender, builds like a software engineer, and leads through influence., * Assess and continuously improve Later's security posture across applications, infrastructure, and development workflows * Define and implement scalable security standards, guardrails, and best practices that support compliance through automated and auditable solutions * Partner with Engineering and Product leadership to align security priorities with business objectives and delivery timelines * emerging risks and proactively design systems and processes that reduce long-term exposure Technical/ Execution * Own identity and access management across Later's platform, including authentication, authorization, and secure machine-to-machine (M2M) processes * Design, implement, and maintain secure authentication systems for both internal tools and customer-facing experiences * Harden login systems, establish consistent authentication patterns across services, and ensure secure integration between tools * Build and maintain internal security tooling to support secure development, operational visibility, and compliance workflows * Embed security controls into CI/CD pipelines, including SAST, DAST, SCA, container scanning, secret management, and secure build/deploy practices * Partner with engineering teams to identify vulnerabilities, clearly communicate risk and impact, and drive effective remediation, * Provide pragmatic, solution-oriented security guidance during system design and architecture reviews * Collaborate cross-functionally to embed security into development workflows without slowing delivery * Translate complex security concepts into clear, actionable recommendations for both technical and non-technical stakeholders * Act as a trusted partner to engineering teams, balancing risk mitigation with business enablement, * Stay current on application security, cloud security, and identity best practices * Apply industry frameworks (e.g., OWASP, NIST, CIS Controls) pragmatically within production environments * Continuously evaluate and improve identity architecture and security automation to scale with the business, * Identity and access management is secure, scalable, and consistently implemented across the platform * Security controls are embedded into CI/CD pipelines, reducing manual effort and improving detection and prevention * Engineering teams proactively consider security in their designs and view security as an enabler-not a blocker * Vulnerabilities are identified early, clearly prioritized, and remediated efficiently * Compliance frameworks (e.g., SOC 2, ISO 27001) are supported through automation and well-defined processes * Later's overall security posture measurably improves while maintaining speed of product delivery ## Related Videos - [Developing the Backend with Stefan Lingler, CTO at Shpock](https://www.wearedevelopers.com/videos/100360-developing-the-backend-with-stefan-lingler-cto-at-shpock) - [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon) - [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Terraform for Developers](https://www.wearedevelopers.com/videos/3-terraform-for-developers) - [Nest.js - TypeScript in the backend can also be clean](https://www.wearedevelopers.com/videos/1033-nest-js-typescript-in-the-backend-can-also-be-clean) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Top Characteristics of a Software Engineer](https://www.wearedevelopers.com/magazine/166-top-characteristics-of-a-software-engineer) - [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift) - [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)