Senior Engineer, Chartis

• 5–8+ years of hands-on experience in security engineering with a direct focus on IAM and DevSecOps practices (no purely advisory or oversight roles)
• Proven, hands-on administration and engineering experience with Okta, including:
• Okta Identity Cloud (OIC)
• Okta Identity Governance (OIG)
• Okta Workflows
• Application onboarding, lifecycle management, and policy enforcement
• Strong, hands-on cloud administration experience in Microsoft Azure (required), including identity, access control, and resource governance
• Working knowledge of AWS and Google Cloud Platform in multi-cloud environments
• Hands-on experience with Kubernetes (K8s), including workload identity, access controls, and platform security considerations
• Working knowledge of Splunk Cloud, including building alerts, dashboards, and detection logic for security-relevant events
• Strong understanding of modern authentication and authorization standards, including OAuth2, OIDC, and SAML
• Proficiency in Python scripting for automation, integration, and operational tooling
• Demonstrated experience integrating security into CI/CD pipelines and infrastructure-as-code workflows
• Experience designing and implementing RBAC/ABAC models across cloud and SaaS platforms
• Demonstrated experience performing threat modeling (e.g., STRIDE, attack trees) and translating findings into actionable engineering controls

Desirable

• We are seeking a hands-on Senior Security Engineer to support and scale security across cloud-native and AI-driven engineering teams
• This role reports into Chartis IT Security and works closely with our development teams to ensure security is effectively integrated into application development, cloud platforms, and delivery pipelines
• This role focuses on identity, automation, and platform security—enabling engineering teams to build and deploy securely without introducing unnecessary friction
• This is a hands-on engineering role, not a review or audit function
• Partner with engineering teams to design secure architectures and solutions
• Integrate security controls into CI/CD pipelines, platform tooling, and application onboarding processes
• Provide technical guidance and reusable patterns for secure development
• Own and improve the application onboarding and identity integration process
• Translate security requirements into practical, scalable, and automated controls
• Collaborate closely with developers while maintaining clear ownership within the Security team