Lead Authentication Engineer – Vice President, Cybersecurity

About the role

We are looking for a senior leader to join our Identity Access Management team and drive the strategic authentication modernization roadmap. The Lead Authentication Engineer will design, integrate, implement and operationalize enterprise authentication solutions across a global workforce.

Key responsibilities

• Lead hands‑on authentication engineering: design, build, integrate and ship secure, scalable solutions for human and non‑human identities.
• Own enterprise authentication & federation: implement and harden OIDC/OAuth2, SAML, SSO, FIDO2/WebAuthn, PKI (mTLS, certificate lifecycle), API authentication and Unix/Linux authentication.
• Integrate and customize IAM platforms: deliver end‑to‑end integrations across Entra ID, Ping Identity, SailPoint, CyberArk, HashiCorp Vault, HSMs, IDM/LDAP and RCBI in cloud and hybrid environments.
• Drive reliability and automation at scale: operate large‑scale IAM estates with HA/DR, performance tuning, IaC (Terraform), configuration management (Ansible/Puppet/Chef), CI/CD, observability and safe deployment strategies.
• Partner and operate across teams: collaborate with product and platform leads, participate in on‑call rotation, lead RCAs and promote operational excellence.
• Translate architecture into executable work: break down designs into epics, stories, runbooks and pipelines; produce ADRs, standards and audit‑ready documentation.

Required profile

• 12+ years of experience in cybersecurity engineering with a hands‑on principal engineering focus.
• Deep expertise in authentication protocols and technologies at enterprise scale.
• Proven mastery of IAM platforms and integration, including migrations and automation.
• Strong background in operating resilient, automated IAM services.

Required skills

• OIDC/OAuth2, SAML, SSO, FIDO2/WebAuthn, PKI (mTLS, certificate lifecycle)
• API authentication (JWT, mTLS) and Unix/Linux authentication
• Entra ID, Ping Identity, SailPoint, CyberArk, HashiCorp Vault, HSMs, IDM/LDAP, RCBI
• Infrastructure as Code (Terraform) and configuration management (Ansible, Puppet, Chef)
• CI/CD pipelines, observability tools, HA/DR design