175K–241K USD / year
Senior Security Engineer, Identity
OtherHybrid — New York, NY
Published on 2026-11-06
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
Build and operate Ramp’s identity and access management platform, making access governed and self-service. The role combines identity architecture with hands-on implementation, including infrastructure as code, access workflows, and support for human and AI-agent identities.
About the company
Ramp is a financial automation platform that provides companies with tools to manage expenses, optimize procurement, and improve financial workflows. It serves businesses looking to streamline their financial processes and enhance visibility into spending.
The team
Corporate Security, working closely with IT, Security Engineering, AI DevX, and the Data team.
Stack
OktaGoogle WorkspaceTerraformOAuth 2.0OIDCSAMLSCIMCross App Access (XAA)
What you'll do
- Manage identity services in Terraform, including Okta applications, policies, groups, and SCIM provisioning.
- Design authorization servers, access policies, scopes, claims, and delegated access for internal services and AI agents.
- Own the IGA platform, including entitlement catalogs, access requests, time-bound grants, and certifications.
- Build agentic workflows that create governed entitlements and prepare Terraform and IGA changes for review.
- Use identity graph tooling to identify and remediate excessive or stale access.
- Build identity data infrastructure to power an agent that can resolve common access issues.
What we're looking for
- 6+ years of identity engineering or IAM experience, including operational ownership of Okta or an equivalent IdP at scale.
- Deep knowledge of OAuth 2.0, OIDC, SAML, and SCIM, including authorization-server audiences, scopes, and claims.
- Working knowledge of XAA, ID-JAG, token exchange, and JWT bearer grants.
- Experience with ISPM or identity graph tooling and automated remediation.
- Experience owning an IGA platform or building an equivalent in-house.
- Terraform experience managing identity providers, including modules, state, and CI.
- Programming experience in Python or Go and building against platform APIs.
Benefits
- Flexible PTO.
- Equity.
- 100% medical, dental, and vision coverage for U.S. employees, with partial dependent coverage.
- 401(k) with employer match.
- Parental leave of up to 16 weeks for birthing and bonding or 8 weeks for bonding only, at 100% pay.
- Relocation expense coverage to NYC or San Francisco, if needed.
- Home-office equipment, wellness stipend, and in-office meals and refreshments.