Senior Security Engineer, IAM

About the role

Relativity is seeking a senior technical leader to define and advance its enterprise Identity and Access Management (IAM) program. The role will shape identity architecture across workforce, machine, and workload domains, embedding AI‑enabled controls into a Zero Trust framework.

Key responsibilities

• Design and evolve identity architecture, mapping layered controls to industry frameworks.
• Implement continuous adaptive trust capabilities such as continuous access evaluation, risk‑based authentication, and signal‑driven session revocation.
• Engineer Zero Trust Network Access, least‑privilege micro‑segmentation, MFA/FIDO2, and Just‑In‑Time access across all access paths.
• Define and maintain SSO, federation, and authentication standards (SAML, OAuth 2.0, OIDC, SCIM, Kerberos, LDAP) for SaaS and multi‑cloud environments.
• Automate identity lifecycle (joiner/mover/leaver) and govern non‑human identities with policy‑as‑code.
• Lead privileged access management, credential vaulting, JIT elevation, and session monitoring.
• Integrate identity telemetry into SIEM/SOAR and UEBA to detect credential abuse and privilege escalation.
• Embed identity controls into AI‑augmented CI/CD pipelines, including secret scanning and IaC policy enforcement.

Required profile

• Proven senior‑level experience designing and operating enterprise IAM solutions.
• Strong leadership skills with the ability to mentor engineers and influence cross‑functional teams.
• Deep understanding of Zero Trust principles and adaptive authentication.
• Experience driving security automation and integrating identity data into detection and response workflows.

Required skills

• Identity architecture and Zero Trust design
• Continuous Adaptive Trust (CAE) and risk‑based authentication
• ZTNA, micro‑segmentation, MFA/FIDO2, Just‑In‑Time access
• SSO, SAML, OAuth 2.0, OIDC, SCIM, Kerberos, LDAP
• CIS Benchmarks, DISA STIGs, automated compliance validation
• Identity Governance & Administration (IGA) – access reviews, certification, SoD
• Privileged Access Management (PAM) – credential vaulting, session monitoring
• SIEM, SOAR, UEBA integration for identity telemetry
• AI‑enabled DevSecOps – secret scanning, IaC identity policy, CI/CD integration

What we offer

• Opportunity to shape a critical security function at a fast‑growing tech company.
• Collaborative environment with cross‑functional security and engineering teams.
• Access to cutting‑edge AI and automation tools.