> Markdown version of [/jobs/ext/3772555-identity-security-engineer](https://www.wearedevelopers.com/jobs/ext/3772555-identity-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Identity Security Engineer

- **Company:** CoStar Group
- **Location:** San Diego, CA, United States (Remote available)
- **Experience:** Expert
- **Salary:** $133,000.0 - $203,000.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Active Directory, Artificial Intelligence, User Authentication, Automation of Tests, Bash Shell, Continuous Integration, Identity and Access Management, Python (Programming Language), Kerberos (Protocol), OAuth, Open Source Technology, OpenID, Public Key Infrastructure, Windows PowerShell, Role-Based Access Control, Azure Active Directory, Security Assertion Markup Language (SAML), Security Information and Event Management, Okta, Large Language Models, Microsoft InTune, Data Analytics, Casper Suite
- **Published:** October 16, 2026
- **Apply:** https://www.juju.com/job/1_ScrapingHub34450-R39662

## About the Role

Communicate frequently and effectively with both technical and non-technical stakeholders + Participate in attack path management efforts via commercial and open-source tools + Stay current with the greater identity threat landscape as well as the identity defense offerings from major IDP vendors **Basic Qualifications** + Bachelor's Degree required from an accredited, not for profit, in person, university or college. + A track record of commitment to prior employers + Thorough understanding of AitM attacks, Evilgnx and understanding on how to neutralize them through strong identity security hygiene + 4+ years of hands-on security engineering experience, including implementation of new controls to address threats + Strong analytical and problem-solving skills with a data-driven approach to decision-making + Hands-on experience administrating industry-standard IDPs (Okta, PingID, Microsoft Entra ID, Active Directory) + Knowledge of authentication and
authorization protocols such as SAML, OAuth, OIDC, Kerberos + Firm understanding of PKI, the FIDO2 framework, passkeys, Windows Hello for Business, and Platform SSO, Okta FastPass, Okta Device Trust + Solid understanding of role-based access control, least privilege, just-in-time access, and other identity security paradigms + Experience analyzing SIEM logs and creating related dashboards + Ability to read and author basic scripts in at least one common language (Python, PowerShell, Bash) **Preferred Qualifications and Skills** + Hands-on experience with Microsoft Intune, Jamf, JumpCloud, or other MDM platforms + Experience with identity security testing tools such as Bloodhound, AzureHound, SharpHound, Responder, etc. + Record of automating operational tasks + Familiarity with CI/CD infrastructure + Experience configuring risk-based conditional access or authentication policies + Experience with workload identity governance + Strong written and verbal
communications skills, with a demonstrated ability to communicate complex topics with both engineering peers and non-technical audiences + Experience with AI/ML-assisted security tooling, including building or deploying LLM-based agents **What's in it for You** When you join CoStar Group, you'll experience a collaborative and innovative culture working alongside the best and brightest to empower our people and customers to succeed.