# Senior Identity Engineer

**Company**: Later
**Location**: Boston, MA
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Salary**: $125,000-205,000 USD
**Category**: Engineering
**Industry**: Technology

**Apply**: https://job-boards.greenhouse.io/later/jobs/8751067002?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_93702022-e37

## Description

As a Senior Identity Engineer at Later, you will play a critical role in strengthening and scaling the security foundations that power our platform.

This role blends deep security expertise with hands-on engineering, with a particular focus on identity and access management, authentication systems, and secure-by-design development practices.

You’ll partner closely with Engineering, Infrastructure, and Product teams to embed security into our CI/CD pipelines, internal platforms, and customer-facing systems,enabling teams to move quickly while keeping our systems, data, and users safe.

### Responsibilities

#### Strategy

- Assess and continuously improve Later’s security posture across applications, infrastructure, and development workflows

- Define and implement scalable security standards, guardrails, and best practices that support compliance through automated and auditable solutions

- Partner with Engineering and Product leadership to align security priorities with business objectives and delivery timelines

- Identify emerging risks and proactively design systems and processes that reduce long-term exposure

#### Technical/Execution

- Own identity and access management across Later’s platform, including authentication, authorization, and secure machine-to-machine (M2M) processes

- Design, implement, and maintain secure authentication systems for both internal tools and customer-facing experiences

- Harden login systems, establish consistent authentication patterns across services, and ensure secure integration between tools

- Build and maintain internal security tooling to support secure development, operational visibility, and compliance workflows

- Embed security controls into CI/CD pipelines, including SAST, DAST, SCA, container scanning, secret management, and secure build/deploy practices

- Partner with engineering teams to identify vulnerabilities, clearly communicate risk and impact, and drive effective remediation

#### Team/Collaboration

- Provide pragmatic, solution-oriented security guidance during system design and architecture reviews

- Collaborate cross-functionally to embed security into development workflows without slowing delivery

- Translate complex security concepts into clear, actionable recommendations for both technical and non-technical stakeholders

- Act as a trusted partner to engineering teams, balancing risk mitigation with business enablement

#### Leadership

- Lead by influence,raising the security bar through standards, tooling, and mentorship

- Set a high standard for secure engineering practices and help others level up their security mindset

- Model accountability, ownership, and transparency in security decisions

#### Research/Best Practices

- Stay current on application security, cloud security, and identity best practices

- Apply industry frameworks (e.g., OWASP, NIST, CIS Controls) pragmatically within production environments

- Continuously evaluate and improve identity architecture and security automation to scale with the business

### Requirements

- 5–7+ years of experience as a Security Engineer or Software Engineer with a strong security focus

- Proven experience building and operating production-grade software, systems, or internal tooling

- Strong background in application security, infrastructure security, and secure CI/CD practices

- Hands-on experience with identity and access management, including authentication systems, authorization frameworks, and machine-to-machine security patterns

- Experience applying security frameworks such as OWASP, NIST, or CIS Controls in real-world production environments

- Familiarity with cloud security tooling (AWS Security Hub, Azure Security Center, or GCP Security Command Center), SIEM/SOAR tools, and Infrastructure-as-Code security scanning (Terraform, CloudFormation)

- Experience supporting compliance frameworks such as SOC 2 and ISO 27001

- Familiarity with modern backend systems (including C#) and cloud-native architectures

- Demonstrated ability to collaborate cross-functionally and influence engineering teams to improve security outcomes

- Strong communication skills with the ability to translate complex security concepts into clear, actionable guidance

### Nice to Have

- Experience designing or migrating identity architecture at scale

- Experience building internal developer security tooling

- Experience working in a high-growth technology environment

### What Success Looks Like

- Identity and access management is secure, scalable, and consistently implemented across the platform

- Security controls are embedded into CI/CD pipelines, reducing manual effort and improving detection and prevention

- Engineering teams proactively consider security in their designs and view security as an enabler,not a blocker

- Vulnerabilities are identified early, clearly prioritized, and remediated efficiently

- Compliance frameworks (e.g., SOC 2, ISO 27001) are supported through automation and well-defined processes

- Later’s overall security posture measurably improves while maintaining speed of product delivery

## Skills

### Required
- application security
- infrastructure security
- secure CI/CD practices
- identity and access management
- authentication systems
- authorization frameworks
- machine-to-machine security patterns
- OWASP
- NIST
- CIS Controls
- cloud security tooling
- SIEM/SOAR tools
- Infrastructure-as-Code security scanning
- compliance frameworks
- modern backend systems
- cloud-native architectures

### Nice to have
- designing or migrating identity architecture at scale
- building internal developer security tooling
- high-growth technology environment

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/later/jobs/8751067002?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)
