Senior Security Engineer, Identity & Access Management

About the Company

Valon is building the AI-native operating system for regulated finance, starting with mortgage servicing. We are a Series C company backed by a16z, transforming industries through our unified platform, ValonOS.

Responsibilities

• Design and support end-to-end lifecycle of workforce identity systems including identity automation and access management
• Support design of secure identity design patterns for product teams building on ValonOS
• Manage and evolve Valon's IdP including SSO integrations, MFA policies, and conditional access rules
• Define and enforce RBAC and group-based access policies for internal applications and cloud environments
• Support privileged access management (PAM) for internal infrastructure
• Design and build AI-assisted workflows to automate core IAM operations
• Evaluate AI risks across IAM pipelines, including data exposure and prompt injection
• Collaborate with Product, Engineering, Data, Compliance, and Legal teams to mitigate data security risks
• Support operational duties including vulnerability management, regulatory compliance, and incident response

Requirements

• 5+ years in security engineering roles with a core focus on IAM
• Bachelor's degree in Information Security, Computer Science, or related field
• Relevant security certifications such as CISSP, CISM, CCSK, or CCSP
• Hands-on experience with enterprise IdP platforms like Okta, Entra ID, or Google Workspace
• Deep understanding of SAML, OIDC/OAuth 2.0, RBAC, ABAC, and API access controls
• Experience with modern identity security technologies and tooling

Preferred Qualifications

• Deep expertise in modern identity protocols: SAML 2.0, OIDC/OAuth 2.0, SCIM, and LDAP
• Solid background in cloud IAM (GCP preferred), including service accounts and workload identity federation
• Experience building AI/LLM-powered workflows in a security context
• Familiarity with securing non-human and agentic identities
• Applied knowledge of security frameworks like OWASP, NIST, CIS, and SOC 2
• Experience in high-growth or startup environments