Remote Senior Security Engineer

Summary

Join a dynamic Earth Observation environment as a Senior Security Engineer (IAM) at ICEYE. Leverage expertise in Identity and Access Management to overhaul existing practices, design robust solutions for securing modern work environments, and collaborate with teams to assess and enhance security posture.

Requirements

• Solid expertise with IAM
• Proficiency in securing API endpoints to prevent unauthorized access and mitigate potential vulnerabilities
• Experience implementing Zero Trust principles
• Experience with identity provider setup and management
• Expertise in DevSecOps and a shift-left mentality, focusing on integrating security into every stage of the development lifecycle, along with strong automation skills
• Understanding and managing public key infrastructure (PKI) systems

Responsibilities

• Collaborate with platform and development oriented teams to assess and enhance our security posture
• Review security events, conduct threat analysis, and perform vulnerability assessments
• Design and implement access control models, manage IAM operations, and enforce the principle of least privilege for our cloud infrastructure and services
• Serve as a reference for authentication and authorization design choices and implementation details across multiple projects

Preferred Qualifications

• Strong understanding and hands-on experience with OAuth2.0, OIDC, and SCIM protocols
• Experience implementing and managing security services within AWS environments
• Experience managing identity management platforms such as Auth0, Okta, or FusionAuth
• Knowledge of Istio and Spire/SPIFFE
• Understanding of OPA (Open Policy Agent)
• Experience with Kubernetes
• Familiarity with HashiCorp Vault

Benefits

• Occupational healthcare, occupational and private insurance
• A yearly benefit budget to spend as you wish (i.e. on sport, transport, bike benefit, wellness, lunch, etc.)
• Phone subscription with iPhone of choice
• Relocation support (i.e. flight tickets, accommodation, relocation agency support)
• Time for self-development, research, training, conferences, or certification schemes