Sr. Security Engineer

Responsibilities

• As a Senior Security Engineer, you will serve as a subject matter expert in securing identities across our cloud and hybrid environments. You will be directly responsible for architecting, deploying, and maintaining our IAM ecosystem—focusing on Identity Governance and Administration (IGA) via
• Saviynt, Workforce Identity/SSO/MFA via

Okta, and Just-In-Time/Continuous Authorization policies via

• Architect, deploy, and maintain robust enterprise identity solutions across Okta (Workforce Identity Cloud), Saviynt (IGA), and SGNL (CA / Dynamic Access).
• Configure and optimize Saviynt for access requests, dynamic role-based access control (RBAC/ABAC), access certification campaigns, and automated provisioning/deprovisioning workflows.
• Manage and secure Okta configurations, including SAML 2.0, OIDC, adaptive MFA policies, passwordless authentication, and Directory Integrations (Active Directory/LDAP/HRIS).
• Develop custom connectors, workflows, and automated pipeline scripts (Python, PowerShell, REST APIs) to integrate target applications into Saviynt and Okta.
• Collaborate with SOC and Incident Response teams to investigate identity-related threats, privileged access abuses, and anomalous login behavior.

Requirements

• 5+ years of direct, hands-on experience
• or similar fine-grained, policy-based access control platforms (CA/ABAC/ReBAC).
• Strong understanding of core identity standards and protocols:
• OAuth 2.0, OIDC, SAML 2.0, SCIM, and LDAP
• Proficient in scripting and automation using
• Python, PowerShell, or Bash, alongside strong REST API integration capabilities.

Preferred

• Experience with Privileged Access Management (PAM) integrations (e.g., CyberArk, BeyondTrust).
• Relevant industry certifications such as
• Okta Certified Professional/Administrator/Consultant
• Saviynt Certified Professional

Role Overview

We are seeking a highly skilled Senior Security Engineer with 5+ years of hands-on experience in Identity and Access Management (IAM) to design, build, and optimize our enterprise identity infrastructure. In this role, you will lead the implementation and daily administration of key IAM, IGA, and continuous authorization frameworks using Okta, Saviynt, and SGNL. The ideal candidate thrives in a technical, execution-heavy environment, bridges traditional IAM with modern Zero Trust / Continuous Adaptive Trust models, and brings deep technical proficiency in automation, API integrations, and access governance.

SGNL

. This is a heavily hands-on position requiring technical leadership, API-driven integration work, and practical engineering expertise.

Fine-Grained & Continuous Authorization

Operationalize SGNL to enforce Zero Trust access, Just-In-Time (JIT) access, and continuous, event-driven authorization policies across enterprise applications and services.

Compliance & Audit

• Partner with Security Compliance to enforce least-privilege principles, generate audit-ready reporting, and remediate identity risk findings.
• Basic

Qualifications

• in information security with a primary focus on Identity and Access Management (IAM).
• Deep technical expertise in Okta, including Lifecycle Management (LCM), Universal Directory, Workflows, Adaptive MFA, and SSO integrations.
• Proven hands-on administration of Saviynt Enterprise IGA, including analytics, connector deployment, lifecycle workflows, and access request configuration.
• Experience with modern continuous authorization architectures, specifically hands-on exposure to

SGNL

Solid grasp of Zero Trust Security frameworks and Least Privilege Access models.

CISSP

, or

CISM

• Background in cloud identity security (AWS IAM, Azure AD / Microsoft Entra ID, GCP IAM).
• Type of work model

Hybrid

Our Hybrid work model: Coupang hybrid work model is designed to enable a culture of collaboration that acts a catalyst to enrich the experience of employees. Employees are required to work at least 3 days in the office per week, with the flexibility to work from home 2 days a week, depending on the role requirement. Some businesses may require more time in office due to nature of work.

Details to consider

Those eligible for employment protection (recipients of veteran’s benefits, the disabled, etc.) may receive preferential treatment for employment in accordance with applicable laws.

Privacy Notice

• Your personal information will be collected and managed by Coupang as stated in the Application Privacy Notice located below.
• https://privacy.coupang.com/en/land/jobs/