Advanced Security Engineer – Identity & Access Management

About the role

The Advanced Security Engineer (IAM) will serve as the technical backbone of Relativity’s enterprise identity and access management program. Working closely with the Manager of Enterprise Security and cross‑functional teams, you will design, deploy and continuously improve AI‑enabled identity solutions that protect workforce, customer and machine identities.

Key responsibilities

• Implement and operate continuous adaptive trust mechanisms such as continuous access evaluation, risk‑based step‑up authentication and session revocation.
• Configure Zero‑Trust Network Access, least‑privilege, phishing‑resistant MFA/FIDO2 and Just‑In‑Time access across all access paths.
• Deploy SSO, federation and authentication standards (SAML, OAuth 2.0, OIDC, SCIM, Kerberos, LDAP) in SaaS and multi‑cloud environments.
• Apply CIS Benchmarks and DISA STIG hardening to identity infrastructure with automated compliance validation.
• Build and maintain identity lifecycle automation (joiner/mover/leaver) integrated with HR systems, directories and downstream applications.
• Manage identity governance workflows, access reviews, certification campaigns and segregation‑of‑duties checks.
• Administer privileged access management, credential vaulting, JIT elevation and session monitoring for both human and non‑human identities.
• Feed identity telemetry into SIEM/SOAR and UEBA platforms, support incident response playbooks and track hygiene metrics.
• Integrate identity checks into CI/CD pipelines, including secret scanning and IaC identity analysis, and act on AI‑generated remediation recommendations.

Required profile

• Bachelor’s degree in Computer Science, Information Security or equivalent; or a Master’s in Cybersecurity.
• 5+ years of hands‑on experience in enterprise IAM or security engineering with a focus on identity, authentication and access control.
• Proven ability to design and operate large‑scale identity solutions in complex, multi‑cloud environments.

Required skills

• Identity providers and SSO platforms: Okta, Microsoft Entra ID / Azure AD, Ping Identity.
• Identity Governance & Administration tools: SailPoint, Saviynt.
• Privileged Access Management solutions and JIT elevation.
• Zero‑Trust Network Access, MFA/FIDO2, session revocation.
• Authentication protocols: SAML, OAuth 2.0, OpenID Connect, SCIM, Kerberos, LDAP.
• Hardening frameworks: CIS Benchmarks, DISA STIGs.
• Security operations: SIEM, SOAR, UEBA.
• CI/CD pipeline integration, secret scanning, Infrastructure as Code identity analysis.