[Hiring] Senior Security Engineer @One Identity

Role Description

One Identity holds certifications because customers require them before they buy, and the ones ahead open international regulatory markets. This role builds the centralized common controls framework, with ISO 27001 and SOC 2 as the base, that each addition maps into. Evidence comes from continuous monitoring, an audit request is answered with a query rather than an email thread, and the next market is a mapping exercise that unlocks revenue opportunities for the company.

We run hosted services in Azure and AWS and ship software customers deploy in their own datacenters, so the evidence sits in cloud control planes, build pipelines, identity systems, and endpoints. Compliance analysts run the assessments and own questionnaire response. This seat builds the systems they draw from: an answer to an auditor and an answer to a customer should come from the same facts.

We're separating from Quest Software and building an independent security function. The team is lean and globally distributed, and this seat owns the compliance engineering program. Scope comes from what you ship and from what the auditors accept.

What you'll do

• Make evidence a query
• Own continuous control monitoring end to end:
  • Integrations into the identity provider
  • Cloud control planes
  • Code repositories
  • Endpoint management
  • Ticketing, with alerting and escalation wired in
• Build the centralized common controls framework and the artifact layer on it:
  • ISO 27001 and SOC 2 as the base
  • Each new framework mapped against it
  • Evidence captured, timestamped, and indexed against the control that requires it
• Hold the platform to its own standard
• Put controls in code
• Write control validation as code
• Partner with the principal infrastructure seat on policy as code
• Decide where agentic workflows belong in compliance engineering
• Own the program's direction
• Advance the program's metrics
• Integrate cyber risk management into the platform
• Own asset prioritization as the base layer of the program
• Front the technical side of audits

Qualifications

• Six or more years across compliance program leadership and security or compliance engineering
• Depth in at least one of two forms:
  • A major framework carried through assessment under your leadership, FedRAMP or comparable
  • GRC engineering you owned end to end
• Strategic framework design
• Engineering depth you've used recently: Python and API integration work

Requirements

• Framework fluency across ISO 27001 and SOC 2
• Familiarity with FedRAMP 20x, NIS2, DORA, and PCI DSS
• Policy-as-code frameworks
• Azure and AWS depth
• Compliance automation platform experience
• Running an audit calendar and an assessor relationship

Benefits

• Collaborate with dedicated professionals
• Opportunity to build and develop products at scale
• Enhanced career opportunities for team members
• Health and wellness prioritization
• Programs that enable career fulfillment

Company Description

One Identity enables organizations of all sizes to better secure, manage, monitor, protect, and analyse information and infrastructure to help fuel innovation and drive their businesses forward.

With team members around the globe, we intend to continue to grow revenues and add value to customers.

When you join our team, you will have the opportunity to build and develop products at a scale few others can provide.

Our product portfolio serves a large base of customers and we are addressing the strategic imperatives for enterprise businesses.

Working with some of the most talented employees the industry has to offer, we provide enhanced career opportunities for team members to learn and grow in a rapidly changing environment.