Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Enterprise IAM Security Engineer role.
Rezi rewrites your resume against Opendoor's job description. Free.
Tailor your resume to this Enterprise IAM Security Engineer role.
Rezi rewrites your resume against Opendoor's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Enterprise IAM Security Engineer posting at Opendoor — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Enterprise IAM Security Engineer posting at Opendoor — free, in seconds.
About the Role
Our Security Engineering team builds intelligent systems that protect Opendoor and our customers while enabling unprecedented engineering velocity. This role owns the identity control plane, designing and building the platform that determines access and writing the code that runs it.
Responsibilities
- Own the identity control plane end to end, designing, building, and operating systems that authenticate and authorize employees and contractors.
- Own passwordless authentication for the workforce, across employee and contractor identities.
- Define enrollment rules for authentication methods based on population and assurance level.
- Design authenticator assurance tiers and tune session policy based on risk.
- Build per-application authentication policies considering device posture, network context, and risk signals.
- Own the non-human identity inventory, including service accounts, API keys, and workload identities.
- Treat AI agents as their own identity class with scoped credentials and audit trails.
- Manage identity configuration as code, shipping and reviewing changes through pull requests.
- Build first-party tooling to extend commercial identity platforms, including lifecycle automation and custom integrations.
- Own the technical direction for identity and contribute to the broader security engineering roadmap.
- Feed identity telemetry and auth events into the detection and response pipeline, and support incident response.
- Establish secure-by-default standards for new SaaS and AI tools at the identity layer.
- Mentor engineers on identity engineering patterns and build automation for other teams.
Requirements
- Proven track record building agentic systems with AI and automation.
- Experience designing, building, and operating a workforce identity platform at enterprise scale with deep hands-on Okta engineering expertise.
- Shipped a passkey rollout on Okta at enterprise scale, with knowledge of WebAuthn and FIDO2 adoption challenges.
- Manages identity infrastructure as code, writing and reviewing Terraform or equivalent IaC tools.
- Strong software engineering ability in Python, Go, or TypeScript.
- Expertise in SSO, SAML, OIDC, SCIM provisioning, conditional access, and least privilege.
- High autonomy; ability to set roadmaps and execute in ambiguous territory.
- Business-enablement mindset focused on adoption and impact.
- Humility and curiosity; builds guardrails and automation to facilitate secure movement for other teams.
Skills
- Okta
- Okta Workflows
- Google Workspace
- Terraform
- Python
- Go
- TypeScript
- GitHub
- WebAuthn
- FIDO2
- SAML
- OIDC
- SCIM
- Datadog
- AI tooling (OpenAI, Anthropic)
- Agentic systems
- Workforce identity platform engineering
- Identity infrastructure as code
- First-party tooling development
- API-driven automation
- SSO
- Conditional access
- Least privilege
- Google Workspace administration and automation (Admin SDK, directory sync, DLP)
- Device trust
- Identity-aware proxy patterns
- SOC 2
- SOX access-control evidence
- Open source identity tooling
- Okta Terraform provider
Location
- Talent hubs
Work Type
- In-office
- 5 days a week (Mo, Tu, Th, Fri)
Experience Level
- Enterprise scale
- High autonomy
About the Company
- Opendoor is a company that builds intelligent systems to protect itself and its customers while enabling engineering velocity.