What You Will Do
As a Senior Security Engineer, you will serve as a subject matter expert in securing identities across our cloud and hybrid environments. You will be directly responsible for architecting, deploying, and maintaining our IAM ecosystem—focusing on Identity Governance and Administration (IGA) via Saviynt, Workforce Identity/SSO/MFA via Okta, and Just-In-Time/Continuous Authorization policies via SGNL. This is a heavily hands-on position requiring technical leadership, API-driven integration work, and practical engineering expertise.
Identity Infrastructure Engineering: Architect, deploy, and maintain robust enterprise identity solutions across Okta (Workforce Identity Cloud), Saviynt (IGA), and SGNL (CA / Dynamic Access).
Identity Governance & Lifecycle Management: Configure and optimize Saviynt for access requests, dynamic role-based access control (RBAC/ABAC), access certification campaigns, and automated provisioning/deprovisioning workflows.
Modern Authentication & SSO: Manage and secure Okta configurations, including SAML 2.0, OIDC, adaptive MFA policies, passwordless authentication, and Directory Integrations (Active Directory/LDAP/HRIS).
Fine-Grained & Continuous Authorization: Operationalize SGNL to enforce Zero Trust access, Just-In-Time (JIT) access, and continuous, event-driven authorization policies across enterprise applications and services.
API & System Integrations: Develop custom connectors, workflows, and automated pipeline scripts (Python, PowerShell, REST APIs) to integrate target applications into Saviynt and Okta.
Incident Response & Threat Mitigation: Collaborate with SOC and Incident Response teams to investigate identity-related threats, privileged access abuses, and anomalous login behavior.
Compliance & Audit: Partner with Security Compliance to enforce least-privilege principles, generate audit-ready reporting, and remediate identity risk findings.
Basic Qualifications
5+ years of direct, hands-on experience in information security with a primary focus on Identity and Access Management (IAM).
Deep technical expertise in Okta, including Lifecycle Management (LCM), Universal Directory, Workflows, Adaptive MFA, and SSO integrations.
Proven hands-on administration of Saviynt Enterprise IGA, including analytics, connector deployment, lifecycle workflows, and access request configuration.
Experience with modern continuous authorization architectures, specifically hands-on exposure to SGNL or similar fine-grained, policy-based access control platforms (CA/ABAC/ReBAC).
Strong understanding of core identity standards and protocols: OAuth 2.0, OIDC, SAML 2.0, SCIM, and LDAP.
Proficient in scripting and automation using Python, PowerShell, or Bash, alongside strong REST API integration capabilities.
Solid grasp of Zero Trust Security frameworks and Least Privilege Access models.
Preferred Qualifications
Experience with Privileged Access Management (PAM) integrations (e.g., CyberArk, BeyondTrust).
Relevant industry certifications such as Okta Certified Professional/Administrator/Consultant, Saviynt Certified Professional, CISSP, or CISM.
Background in cloud identity security (AWS IAM, Azure AD / Microsoft Entra ID, GCP IAM).
Type of work model
Hybrid
Our Hybrid work model: Coupang hybrid work model is designed to enable a culture of collaboration that acts a catalyst to enrich the experience of employees. Employees are required to work at least 3 days in the office per week, with the flexibility to work from home 2 days a week, depending on the role requirement. Some businesses may require more time in office due to nature of work.
Details to consider
Those eligible for employment protection (recipients of veteran’s benefits, the disabled, etc.) may receive preferential treatment for employment in accordance with applicable laws.
Privacy Notice
Your personal information will be collected and managed by Coupang as stated in the Application Privacy Notice located below. https://privacy.coupang.com/en/land/jobs/