Remote Jobs Across Engineering, Product, and Data

Browse remote openings from startups and established companies. Filter by title, location, compensation, and skills to find the best match quickly.

Popular Job Functions

General Sales Software Engineer Manager Customer Support Analyst Director Customer Success Consultant Project Manager

Strict location onlyShow closed jobs

Post Date

Minimum Salary

Experience

616 Jobs

388 Companies

Ruby on Rails Engineer

Fearless

Backend Engineer23 hours ago

Full Time Remote Mid Level

Role Description We are actively seeking a Full Stack Engineer with strong Ruby on Rails experience to support a federal identity and authentication platform. In this role, you’ll work closely with product managers, security specialists, privacy experts, and federal stakeholders to build and enhance secure, cloud-native applications that support authentication, identity verification, and partner experiences. This role is fully remote. Your Responsibilities in this Role: - Design, develop, and maintain full-stack features using Ruby on Rails and modern JavaScript technologies. - Build and maintain RESTful APIs and service-oriented application architectures that support secure identity and authentication services. - Develop accessible, standards-compliant user interfaces while adhering to Section 508 and WCAG accessibility requirements. - Build, deploy, and support cloud-native applications within AWS environments. - Monitor and troubleshoot production applications using AWS services including CloudWatch and RDS. - Participate in CI/CD pipelines and infrastructure automation using tools such as GitHub Actions and Terraform. - Participate in on-call and deployment rotations, providing incident response support during business hours. - Collaborate closely with product, security, privacy, and federal stakeholders to deliver secure, scalable solutions. - Communicate proactively with teammates and clients, contributing to a collaborative, solutions-oriented engineering culture. Qualifications - 2+ years of hands-on experience developing full-stack applications using Ruby on Rails. - Experience designing and maintaining RESTful APIs. - Strong understanding of object-oriented programming, domain modeling, and service-oriented or modular application architecture. - Experience developing frontend applications using JavaScript and React. - Knowledge of accessibility best practices, including Section 508 and WCAG compliance. - Experience working with AWS services, including RDS (Postgres) and CloudWatch. - Experience building and maintaining CI/CD pipelines. - Experience using Infrastructure as Code tools such as Terraform and GitHub Actions (or similar CI platforms). - Ability to support production applications through on-call rotations and incident response. - Experience collaborating effectively across engineering, product, security, and client teams. - Bachelor's degree or higher in a related field. - Ability to obtain and maintain public trust clearance. Requirements - Experience implementing authentication and authorization protocols including OAuth 2.0, OpenID Connect (OIDC), SAML, and Multi-Factor Authentication (MFA). - Experience with identity proofing, document verification, fraud detection, risk-based authentication, or vendor identity verification integrations. - Familiarity with NIST Digital Identity Guidelines (SP 800-63-3), including Identity Assurance Levels (IAL), Authenticator Assurance Levels (AAL), and Federation Assurance Levels (FAL). - Experience supporting federal digital identity, authentication, or highly regulated government systems. Benefits - Flexible, life-friendly schedules. - 100% coverage for our medical HSA plan + HSA contributions. - Dental & vision covered 100% for you and your dependents. - Competitive premiums for HMO/PPO and dependent coverage. - 401(k) with 4% match & immediate vesting. - Paid Parental Leave and 12 weeks paid FMLA. - Generous PTO, 11 Federal Holidays, a Birthday Holiday, and Sick Leave. - Up to 15 days for Jury Duty and Bereavement Leave. - Education, wellness, and tech allowances. - Referral bonus: $6K–$12K for each successful referral. - Pet insurance & discount plans. - Employee Assistance Program (EAP). - Legal support, life insurance, disability coverage. - Performance-Based Bonuses.

Ruby on Rails JavaScript REST API AWS Amazon CloudWatch Amazon RDS CI/CD GitHub Actions Terraform React PostgreSQL Infrastructure as Code OAuth 2.0 OpenID Connect SAML

View details: Ruby on Rails Engineer

United States

$96.1K - $142K / year

Apply

Identity Security Engineer

Little Caesars Pizza

Family. Fun. Pizza.

Security Engineer23 hours ago

Full Time Remote Mid LevelTeam 10,001+Since 1959H1B No Sponsor

Company Site LinkedIn

Role Description The Identity Security Engineer will strengthen Little Caesar’s and all Ilitch Companies’ identity and access management security posture by driving governance, risk reduction, and secure lifecycle management across critical systems. This role is about ensuring that the right people have the right access at the right time through strong processes, well-managed IAM tools, and consistent oversight. You will serve as an agent of identity security, leading access reviews, improving RBAC models, optimizing IAM platforms, and partnering with teams across the business to drive secure identity practices. Key Responsibilities - IAM Governance & Oversight - Lead scheduled and ad-hoc access reviews for human and non-human identities, applications, groups, cloud resources, and privileged accounts. - Create, maintain and enforce IAM governance standards, policies, and procedures. - Monitor identity controls for audit support and compliance with internal and external frameworks. - Drive remediation efforts for access control gaps. - Role-Based Access Control (RBAC) & Lifecycle Management - Design and refine RBAC models, access tiers, and least-privilege principles with internal stakeholders. - Work with application owners to map permissions and standardize access roles. - Support user lifecycle processes (Joiner/Mover/Leaver) and automated provisioning workflows where available. - IAM Tool Ownership & Administration - Serve as primary owner/admin for one or more IAM platforms. - Manage configuration, integrations, workflows, and system health. - Coordinate enhancements, upgrades, and platform improvements. - Partner with application teams to onboard new systems into the IAM ecosystem. - Document entitlements, define provisioning rules, and ensure consistent access patterns. - Engineering & Cloud Infrastructure Support - Lead MFA/Passkey implementation and support SSO integrations and ensure alignment with security requirements. - Security Operations Support - Review and approve access requests for elevated or sensitive roles. - Help investigate access-related security incidents and identity threats. - Provide security guidance to internal teams for identity best practices. Qualifications - Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or equivalent experience will be considered in lieu of formal degree. - 4-5 years experience in cybersecurity, IT, or similar discipline, with at least 2 years of hands-on identity security experience. - Hands-on experience with one or more IAM/IAG platforms. - Working knowledge of access governance, RBAC, provisioning, and directory services. - Understanding of SSO/MFA technologies, SAML/OIDC/OAuth protocols. - Familiarity with compliance frameworks: NIST, SOX, ISO 27001, PCI. Preferred Knowledge, Skills and Abilities - Certifications such as: CISSP, CCSP, Security+, etc., highly preferred. - Experience onboarding applications into IAM platforms. - Prior ownership of an IAM tool or identity governance program. - Participation in IAM modernization projects or cloud migration initiatives. - Demonstrated success implementing RBAC models or conducting large-scale access reviews. - Hands-on knowledge of PAM, secrets management, or identity threat detection. - Portfolio examples (RBAC matrix, IAM workflows, automation scripts, etc.). Competencies - Accountable, humble, and courageous. - Strong documentation and communication skills. - Ability to partner with business and technical teams. - Detail-oriented, organized, and able to drive tasks to completion.

Amazon IAM SSO SAML OpenID Connect OAuth Identity Governance

View details: Identity Security Engineer

United States

Apply

Software Engineer

Qode

Qode is a unified hiring platform designed for enterprise scale, centralizing the entire hiring lifecycle in one environment. Key features include: Candidate sourcing and outreach. AI-led interviews in 30+ languages. Applicant tracking and job distribution to 200+ platforms. Outcome-based pricing: clients pay for results, not software seats. 800M+ candidate profiles indexed. 200,000+ applicants processed per month. 56+ enterprise clients worldwide.

Software Engineer1 day ago

Full Time Remote Mid Level

Company Site

Role Description We are seeking a mid-level Software Engineer to join our high-output Platform Services team. This role is crucial for building and maintaining the foundational systems that power identity, authentication, and integration capabilities across our multi-product SaaS platform. Our team operates lean, leveraging a combination of deep engineering expertise and AI-assisted tooling to achieve platform-scale impact. As an engineer on this team, you will be expected to: - Deeply understand the systems you own. - Proactively identify and address potential issues. - Deliver solutions with a high degree of care to ensure downstream product teams remain unblocked. The immediate focus will be on federated identity and authorization infrastructure, involving the development and extension of platform services essential for authenticating users, enforcing authorization, and managing access at scale. A strong candidate will possess: - Hands-on experience with OAuth 2.0, OIDC, SAML, and JWT. - A solid understanding of authorization frameworks. - Practical knowledge of integrating identity services into real-world applications. - Embrace AI-assisted workflows as a core part of their development process. Qualifications - 3-5 years of professional software engineering experience. - Demonstrated ability to own and deliver features independently in a production environment. - Hands-on experience building backend services in .NET or Python, including RESTful API development. - Demonstrated experience implementing or integrating with federated identity systems using OAuth 2.0, OIDC, SAML 2.0, and/or JWT in production applications. - Practical understanding of authorization frameworks. - Proficiency in .NET or Python for backend service development. - Familiarity with modern API frameworks (e.g., .NET 9+, FastAPI). - Working knowledge of identity protocol mechanics. - Experience with multi-tenant SaaS integration patterns. - Familiarity with cloud platforms (AWS preferred). - Proficiency with standard development tooling: Git, CI/CD pipelines, containerization (Docker), and automated testing. - Active use of AI-assisted development tools as part of a daily engineering workflow. Requirements - Design, implement, test, and release features end-to-end with limited guidance. - Independently identify edge cases and potential failure modes within assigned work. - Write clean, maintainable code and provide constructive, specific feedback during code reviews. - Proactively communicate blockers or ambiguities to the team. - Apply practical knowledge of federated identity standards. - Understand and reason about authorization frameworks, policy enforcement, and integration. - Reason clearly about token lifecycle, session management, and security implications. - Understand the mechanics of connecting distributed services. - Build and maintain integrations that are observable and fault-tolerant. - Write and work with API contracts with attention to versioning and backwards compatibility. - Actively use AI-assisted development tools to accelerate design, implementation, and validation. - Participate in building and improving AI-assisted workflows. - Stay current on evolving AI tooling and introduce new approaches to the team. - Write tests with sufficient coverage to catch regressions. - Contribute to operational health by monitoring shipped features. - Document systems and processes to reduce reliance on tribal knowledge. - Build and extend platform services for federated identity, authentication, and authorization. - Implement integrations with the centralized identity platform. - Support product teams with integration processes, debugging, and navigating edge cases. - Develop tooling, documentation, and examples for self-service integrations. - Design and implement backend service integrations using Python. - Participate in API design reviews. - Contribute to AI harness development to improve team velocity. - Share effective AI-assisted engineering patterns with the team. - Write unit, integration, and acceptance tests. - Instrument services for observability. - Participate in on-call rotations and incident response. - Participate in design discussions and code reviews. - Provide mentorship and review support to junior engineers. - Contribute to internal documentation, runbooks, and onboarding materials. Benefits - Competitive salary and performance-based bonuses. - Flexible work hours and remote work options. - Health, dental, and vision insurance. - Retirement savings plan with company matching. - Professional development opportunities. Company Description We are committed to fostering an inclusive and diverse work environment where everyone can thrive. Our mission is to empower teams to deliver significant product value through innovative technology solutions.

AI OAuth 2.0 OpenID Connect SAML JWT .NET Python REST API FastAPI AWS Git CI/CD Docker/Containers Docker Observability/Monitoring

View details: Software Engineer

United States

Apply

Natural/COBOL Developer

Air InfoSec, LLC

Software Engineer1 day ago

Contract Remote Mid Level

Role Description This is a remote position. The Natural/COBOL Developer will support the Texas Workforce Commission on the NASWA SIDES exchange implementation project. This role performs advanced automated systems development work as part of a project team implementing four standardized NASWA SIDES exchanges: Additional Fact-Finding, Determinations, Monetary Charges, and Benefit Charges. The position supports all phases of the system development life cycle, including requirements analysis, coding, testing, and troubleshooting for internal and external clients. The Natural/COBOL Developer will develop and test COBOL, Natural, and JCL applications, and will integrate incoming and outgoing NASWA SIDES data streams into the existing core legacy processing architecture. This work requires modification of runtime routines, user interface screens, database tables, and batch processing jobs across multiple functional areas. Responsibilities - Perform advanced automated systems development work as a member of the project team to implement the four standardized NASWA SIDES exchanges: Additional Fact-Finding, Determinations, Monetary Charges, and Benefit Charges. - Support all phases of the system development life cycle, including external customer service, requirements analysis and documentation, coding, and testing. - Resolve software, data, hardware, and reporting problems, and troubleshoot system issues for internal and external clients. - Develop and test COBOL, Natural, and JCL applications to meet design specifications. - Document current processes, create and review project specification modifications, and create test cases for new and modified programs. - Analyze, document, design, and develop logical, structured programs and systems appropriate to customer needs that may be maintained by others. - Test applications in accordance with agency standards. - Ensure adherence to programming documentation, procedural standards, and management goals and objectives. - Integrate incoming and outgoing NASWA SIDES exchange data streams into the existing core legacy processing architecture, including modification of runtime routines, user interface screens, database tables, and batch processing jobs. - Conduct a separate, dedicated analysis phase for each of the four SIDES Exchanges due to variations in data formats, triggers, and validation rules across functional areas. Qualifications - 8 years of advanced proficiency in writing, testing, and debugging COBOL, Natural, and JCL applications within a large-scale mainframe environment. - 8 years of hands-on experience analyzing, modifying, and optimizing DB2 tables, schemas, and relational databases to integrate new data structures into existing systems. - 8 years of knowledge of scripting and batch processing in legacy and current technology to modify online user screens (CICS/Map environments), runtime routines, and complex background batch processing jobs. - 8 years of knowledge of Web API development, including SOAP, REST, XML, and JSON, with specific experience mapping and parsing external web-service data streams into legacy mainframe backend processing. - 8 years of experience implementing secure user authentication and authorization protocols using enterprise frameworks such as LDAP, SAML, or OIDC. - 8 years of experience analyzing existing legacy routines and batch processing workflows to integrate new functional elements and modify underlying DB2 database tables. - 8 years of knowledge of Software Development Life Cycle (SDLC) principles, practices, and techniques of application programming and software design. - 8 years of ability to accurately test software applications using a data driven development approach. - 8 years of skill in solving problems, scheduling, testing, installing, and implementing programs, and troubleshooting computer software systems. - 8 years of expertise in analyzing undocumented or highly customized legacy code routines to perform precise gap analysis and impact mapping. Preferred Qualifications - 2 years of prior experience specifically implementing or maintaining NASWA SIDES (State Information Data Exchange System) exchanges and technical specifications. - 3 years of strong functional knowledge of UI program workflows, specifically involving Additional Fact-Finding (ADF), Determinations and Decisions (DD), Monetary/Potential Charges (MPC), and Benefit Charges (BC). - 2 years of experience with SDLC tools such as Visio and ALM Octane. - 3 years of experience handling and securing sensitive Personally Identifiable Information (PII) within a state or federal agency framework. - 3 years of experience automating identity management services, including user authentication and authorization, using an authentication framework such as Azure, Okta, LDAP, or Entra. Additional Requirements - Texas-based candidates are preferred. - Candidates may be subject to criminal background checks as authorized by Texas law prior to selection. - Candidates may be required to report to the office with seventy-two hour notice for any TWC business need. - Overtime work exceeding forty hours per business week must be coordinated and pre-approved through TWC. Work Location and Schedule - Location: 101 E. 15th Street, Austin, Texas 78778, if applicable. - Schedule: Monday through Friday, 8:00 AM to 5:00 PM, excluding State holidays; occasional evenings, weekends, and holidays may be requested. - Work Arrangement: Remote

JCL IBM Mainframe CICS SOAP JSON LDAP SAML OpenID Connect SDLC Azure Okta

View details: Natural/COBOL Developer

United States

$58 - $68 / hour

Apply

Sr. Java/ReactJS Developer

BDR Solutions LLC

BDR Solutions, LLC, (BDR) supports the U.S. Federal Government in successfully achieving its mission and goals. Our service and solution delivery starts with understanding each client’s end-state, and then seamlessly integrating within each Agency’s organization to improve and enhance business and technical operations and deployments. (Military Veterans are highly encouraged to apply)

Backend Engineer2 days ago

Full Time Remote SeniorTeam 51-200

Role Description BDR is seeking a Sr. Java/ReactJS Developer to join our growing team! This position will be performed virtually from the individual’s home office working on EST time schedule. This position requires US Citizenship with an active IRS Minimum Background Investigation (MBI). - Build and maintain Developer Portal front-end: searchable API catalog, documentation display, usage guides, access request workflows, Section 508-compliant responsive UI - Integrate portal front-end with enterprise IAM systems and back-end automation workflows built by KP2 - Perform Section 508 / WCAG 2.1 accessibility validation for all portal deliverables prior to Government acceptance - Support usability, functional, regression, and security validation testing for portal capabilities Qualifications - 4+ years ReactJS development in an enterprise or federal environment - Java / Spring Boot back-end experience for portal API integration - Enterprise IAM integration: SSO, OAuth2, SAML, OIDC, RBAC - Section 508 / WCAG 2.1 accessibility compliance for web applications - Active IRS Minimum Background Investigation (MBI) required Requirements - This position is contingent upon contract award. Employment is not guaranteed and will proceed only if the associated contract is awarded and funded. - In addition, U.S Citizenship is required. Select applicants will be subject to a government security investigation and must meet eligibility requirements for access to classified information and be able to obtain a government-granted security clearance. - Individuals may also be subject to a background investigation including, but not limited to criminal history, employment and education verification, drug testing, and creditworthiness. Benefits - The salary compensation range for this position is $140,000 – $165,000. - Compensation decisions depend on a wide range of factors, including but not limited to skill sets, experience and training, security clearances, licensure and certifications, and other business and organizational needs. Company Description BDR Solutions, LLC, (BDR) supports the U.S. Federal Government in successfully achieving its mission and goals. Our service and solution delivery starts with understanding each client’s end-state, and then seamlessly integrating within each Agency’s organization to improve and enhance business and technical operations and deployments.

Java React Amazon IAM Spring Boot SSO OAuth 2.0 SAML OpenID Connect

View details: Sr. Java/ReactJS Developer

United States

$140K - $165K / year

Apply

Senior Security Engineer

Function Health

Function Health provides lab testing services to aid in the early detection of thousands of diseases. Focused on empowering patients to take charge of their hea

Security Engineer2 days ago

Full Time Remote Senior

Company Site

Role Description We’re looking for a pragmatic Security Engineer with a strong focus on Identity and Access Management (IAM) to join our lean, fast-paced Security Operations team. In this hands-on role, you will lead the design and management of critical IAM systems protecting our clients’ health data—the foundation of our business. With nearly 1 million users and growing rapidly, you will be leading efforts for Okta and ConductorOne, responsible for: - Application integrations - Enabling provisioning - Building out our Okta organizational structure - Enforcing security policies around user access Beyond IAM, there’s room to expand into security operations, IT automation, and compliance as our team grows. This is a unique opportunity to own one of the strongest security controls in the company and directly reduce organizational risk at scale. Key Responsibilities - Administer and optimize Okta, including: - Integrating new applications for SSO - Implementing and enhancing provisioning and revocation workflows - Building and maintaining Okta organizational structure and role mappings - Administer ConductorOne to: - Integrate it with all relevant applications - Conduct User Access Reviews (UARs) - Enforce time-based access controls - Enable and improve automated provisioning and revocation - Collaborate with cross-functional teams to ensure secure onboarding/offboarding and least privilege enforcement - Support ongoing IAM policy development, documentation, and audit readiness - Monitor and respond to IAM-related alerts and incidents, escalating as needed - Identify opportunities to automate IAM workflows and enhance security operations - Participate in broader security initiatives including vulnerability management, IT automation, and compliance support Qualifications - 3–5 years of hands-on experience administering IAM platforms, ideally Okta and/or ConductorOne - Strong knowledge of SSO protocols (SAML, OIDC), provisioning standards (SCIM), and IAM best practices - Experience integrating multiple SaaS applications into centralized IAM systems - Familiarity with user lifecycle management, role-based access control (RBAC), and access review processes - Solid understanding of cloud infrastructure identity models (GCP preferred) and security operations fundamentals - Experience using Terraform for infrastructure as code, particularly for managing IAM resources and integrations - Comfortable working independently in a fast-moving environment with minimal supervision - Strong organizational skills and a detail-oriented mindset Core Values - Ruthless Prioritization: We don’t let perfect get in the way of progress. We move quickly to drive value, not perfection. We prioritize what drives impact. We never compromise on standards of excellence. - Member-First, Always: We design and deliver like we’re caring for someone we love. We create calendar, actionable, human experience. We prioritize responsiveness, peace of mind, and outcomes. We empower members with truth, clarity, and care. - One Team, Moving Fast: We are aligned in purpose, prioritization, and speed. We gather diverse perspectives to make informed decisions. We clear paths for each other and move fast together. We communicate clearly and respectfully, rallying around shared goals. - Radical Ownership, Relentless Execution: We don’t just ship– we own outcomes and drive results. We act with urgency and precision. We anticipate, initiate, and follow through. We meet challenges with grit and pragmatism. We embrace new tech to deliver better outcomes. - Mission Over Ego: We are ruthlessly aligned to our mission - and leave ego at the door. We disagree and commit. We don't tolerate politics or withholding information. We operate with honesty, transparency, and respect. - Sustained Integrity in Every Detail: We earn trust by obsessing over accuracy, quality, and clarity in everything we do. We prioritize clinical precision - data must be right. We sweat the details because outcomes depend on them. Benefits - Competitive salary and benefits package - Flexible working hours - Dynamic work environment where creativity and innovation are encouraged Important Notice Legitimate communication from the Function Health team will always come from an email address ending in @functionhealth.com. Function Health will never request personal information such as banking details or payment during the hiring process. Please be cautious of communications or job offers that come from other email domains, instant messaging platforms, or unsolicited calls. If you ever have doubts about the legitimacy of a communication, please reach out to us directly at talent@functionhealth.com.

Amazon IAM Okta SSO SAML OpenID Connect GCP Terraform Infrastructure as Code

View details: Senior Security Engineer

United States

Apply

Cloud Infrastructure Architect

ACT DIGITAL Deutschland GmbH

Infrastructure Engineer2 days ago

Full Time Remote Mid Level

Role Description Wir bei ACT Digital sind Full-Service IT-Dienstleister und einen großen Rahmenvertrag im öffentlichen Sektor gewonnen. Zur Verstärkung unserer bestehenden Teams suchen wir ab sofort festangestellte Mitarbeitende (m/w/d), die unser Projekt langfristig unterstützen und Teil unseres Experten-Teams werden möchten. - Aufbau, Betrieb und Weiterentwicklung von Kubernetes basierten Plattformen - Deployment, Automatisierung und Betrieb von Anwendungen in OpenShift - Integration & Betrieb moderner Identity- & Access-Management-Komponenten (OAuth2, OIDC, SAML) - Analyse und Behebung von Störungen in komplexer Cluster-Ebene - Infrastrukturautomatisierung mittels Terraform, Ansible und weiteren IaC-Tools - Monitoring, Logging & Performance-Optimierung, so wie Anbindung neuer Systeme - Erstellung und Pflege technischer Dokumentationen nach etablierten Standards - Enge Zusammenarbeit mit Architektur, Entwicklung und Security-Teams Qualifications - Kubernetes - Mindestens 5 Jahre Berufserfahrung - CKA, CKS oder CKAD Zertifizierung bevorzugt - Erfahrungen mit API-Gateway und Ressourcen Management notwendig - CI/CD Pipelines - Monitoring - Grafana - Prometheus - Red Hat OpenShift - Terraform oder OpenTofu - Helm-Chart - Ansible - Hyperscaler / Cloud: Bevorzugt Public Cloud Erfahrungen mit IONOS Nextcloud - Erfahrungen mit typischen Hyperscalern (AWS, Azure, GCP) - Erfahrungen in Agile Software Development process (z.B. SCRUM) Requirements - Polizeiliches Führungszeugnis vor Anfang - Bereitschaft, eine SÜ2 einzuleiten - Fließend deutsch und englisch Benefits - 30 Tage Urlaub pro Jahr (für eine 5-Tage Arbeitswoche) - Flexible Arbeitszeiten und Home-Office Möglichkeit - Aktive Karriereplanung inkl. kontinuierlicher Weiterbildungen - Große Auswahl an Benefits wie z.B. ein Jobrad-Leasing, Wellpass, FINN JobAuto, hrmony Benefits uvm. - Individuelle Gehaltsbestandteile wie z.B. Zuschuss zur Mobilität (Deutschlandticket) und Essenszuschüsse - Attraktive Bezuschussung zur Betrieblichen Altersvorsorge - Social Events (vor Ort + Online)

Kubernetes OpenShift OAuth 2.0 OpenID Connect SAML Terraform Ansible Infrastructure as Code Observability/Monitoring CI/CD Grafana Prometheus Helm AWS Azure GCP

View details: Cloud Infrastructure Architect

Germany

Apply

IT IAM Engineer

Lumistry

Security Engineer2 days ago

Full Time Remote Mid LevelTeam 51-200

Role Description The IT IAM Engineer acts as a business enabler, proactively identifying and building solutions that help the company scale securely. The role owns the day-to-day administration of Lumistry's identity, access, and endpoint infrastructure and serves as the technical escalation point above our managed service provider for IT support. This is a role for someone who is comfortable working autonomously and taking ownership of their work, with support from the team. We are looking for a candidate who enjoys pragmatic optimization: automate the repetitive work and remediate what matters. The role reports to the Senior Director of IT & Information Security. - Administer the corporate identity provider: SSO configuration, application integrations, directory hygiene, and authentication policy - Build and maintain SCIM provisioning and deprovisioning so that joining, moving, and leaving the company drives access automatically from the HR system of record - Develop zero-touch employee lifecycle from initial provisioning through teardown in disparate systems. - Design and operate privilege escalation workflows so elevated access is requested, approved, time-bound, and logged rather than standing - Manage the lifecycle of service, shared, and machine accounts, including ownership assignment, credential vaulting, and rotation - Administer the productivity and collaboration suites (Google Workspace, Microsoft 365), including organizational units, delegation, security settings, and license hygiene - Execute identity consolidation across legacy product domains, working toward a single directory of record - Manage business request intake and routing so that requests for access, software, and purchases are approved by the appropriate owners before fulfillment - Conduct recurring user-access reviews and SSO hygiene checks across the SaaS application estate, producing audit-ready evidence - Manage software and hardware assets, including inventory tracking, procurement support, and administration of the macOS and Windows fleet through MDM - Maintain endpoint security by enforcing patching, triaging endpoint security alerts and vulnerabilities, and driving remediation to completion - Serve as the escalation point for the outsourced helpdesk, resolving escalated tickets and identifying opportunities to automate recurring requests - Automate repetitive tasks by integrating and scripting across the IT and security toolchain to scale the team's impact as the company grows - Support SOC 2 and enterprise customer security reviews with access evidence, controls, and documentation - Other duties as assigned Qualifications - 5+ years of hands-on IT or identity experience in a production environment - Direct experience configuring an identity provider and SSO integrations (SAML/OIDC) - Experience building SCIM provisioning and deprovisioning against a real application estate - Experience with Mobile Device Management for macOS and Windows - Practical scripting ability (Python, PowerShell, or similar) and comfort working with application and directory APIs - Detail and process-oriented mindset with the willingness to be a generalist and dig into things you have not done before - Excellent written communication and an inclination to document your work - Ability to operate semi-autonomously, sorting immediate priorities out of the shifting needs of a growing company Preferred - Experience in a regulated space such as SOC 2, HIPAA, or PCI compliance environments - Experience with identity workflow and automation platforms - Experience consolidating identity across acquired or legacy products - Experience coordinating with a managed service provider - Prior experience at a SaaS company or startup - Experience in secure systems for healthcare or financial industries Compensation The salary range for this role is $100,000-120,000, commensurate with experience. Work Location This is a remote position for candidates based out of the U.S. Applicants must currently reside in and be legally authorized to work in the United States. We are currently unable to provide visa sponsorship or relocation assistance for this role. Diversity & Inclusion at Lumistry Lumistry is an equal opportunity employer dedicated to an inclusive workplace. We prohibit discrimination and harassment based on race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, pregnancy, or any other characteristic protected by law. This commitment applies to all aspects of employment, from recruiting and hiring to compensation and promotion. Our decisions are based solely on qualifications, merit, and current business needs. Accessibility We provide reasonable accommodations for qualified individuals with disabilities during the application and interview process. If you require assistance, please don't hesitate to reach out.

Amazon IAM SSO Google Workspace macOS Microsoft Windows SAML OpenID Connect Python PowerShell

View details: IT IAM Engineer

United States

$100K - $120K / year

Apply

Lead Platform Architect

Koniag Government Services, LLC

Koniag Government Services (KGS) is an Alaska Native Owned corporation supporting the values and traditions of our native communities through an agile employee and corporate culture that delivers Enterprise Solutions, Professional Services and Operational Management to Federal Government Agencies.

Architect2 days ago

Full Time Remote LeadTeam 1,001-5,000

Role Description Koniag IT Systems, LLC, a Koniag Government Services company, is seeking a Lead Platform Architect with a Secret Security clearance to support KITS and our government customer. The position is remote. The ideal candidate is a visionary and technically authoritative professional with deep expertise in designing and implementing enterprise-scale ICAM architectures leveraging Okta and SailPoint platforms within a federal environment. This individual will serve as the primary technical authority for ICAM platform architecture, driving the strategic design, modernization, and integration of identity and access management solutions that align with Zero Trust principles, federal security standards, and mission objectives. The ICAM Lead Platform Architect will serve as the senior technical leader responsible for the end-to-end architecture, design, and strategic direction of ICAM platforms and solutions built on Okta and SailPoint within a federal government environment. This individual will provide authoritative technical guidance across all aspects of the ICAM platform lifecycle, from solution architecture and platform engineering through integration, optimization, and modernization. Principal responsibilities will include but are not limited to: - Serve as the primary technical authority and lead architect for enterprise ICAM platforms, providing strategic direction and hands-on architectural guidance for Okta and SailPoint implementations in a federal government environment. - Design and develop comprehensive ICAM architecture solutions, including reference architectures, solution design documents, architecture decision records (ADRs), and integration blueprints that align with federal standards, Zero Trust principles, and mission requirements. - Lead the architectural design and implementation of Okta platform capabilities, including SSO, MFA, Adaptive Authentication, Universal Directory, Lifecycle Management, API Access Management, and Okta Workflows. - Lead the architectural design and implementation of SailPoint Identity Governance solutions, including identity lifecycle management, role-based access control (RBAC), access certifications, separation of duties (SoD) policies, and automated provisioning and deprovisioning workflows. - Develop and maintain the overarching ICAM platform roadmap, identifying opportunities for modernization, capability enhancement, and alignment with emerging identity security technologies and federal mandates. - Architect and oversee the integration of Okta and SailPoint platforms with enterprise systems, applications, directories, and cloud services, leveraging federation protocols, APIs, and connector frameworks. - Provide technical leadership and mentorship to ICAM engineers, administrators, and support staff, guiding the team in best practices, architectural patterns, and platform-specific implementation standards. - Collaborate with information system security managers (ISSMs), security architects, and government stakeholders to ensure ICAM architectures meet federal security requirements, including NIST SP 800-53 controls, FICAM guidelines, and Zero Trust Architecture mandates. - Lead technical design reviews, architecture review boards (ARBs), and platform governance activities to ensure consistency, quality, and alignment of ICAM solutions across the program. - Evaluate and recommend emerging ICAM technologies, tools, and platforms, providing informed assessments of their suitability for adoption within the federal ICAM ecosystem. - Develop and maintain authoritative technical documentation, including architecture diagrams, data flow diagrams, interface control documents (ICDs), and platform configuration standards. - Support the ATO process by providing architectural expertise and contributing to security documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), and Risk Assessment Reports (RARs). - Collaborate with cloud architects and DevSecOps teams to ensure ICAM platform architectures are optimized for cloud environments and integrated into CI/CD pipelines. - Lead troubleshooting and resolution of complex, high-impact technical issues within Okta and SailPoint environments, providing expert guidance to engineering teams. - Engage directly with government stakeholders and senior leadership to communicate ICAM architectural strategies, roadmaps, and technical recommendations through briefings and presentations. - Drive the adoption of automation, AI-driven capabilities, and intelligent workflows within ICAM platforms to enhance operational efficiency and security outcomes. Qualifications - Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Systems Engineering, or a related field from an accredited college or university; equivalent work experience may be considered in lieu of a degree. - 8+ years of experience in identity and access management, with progressive technical responsibility culminating in an architectural or senior engineering leadership role. - 5+ years of hands-on experience designing, implementing, and managing enterprise-scale Okta and/or SailPoint solutions. - Demonstrated experience architecting ICAM solutions in a federal government environment. Requirements - Active Secret Clearance required. - Exceptional communication skills in English – both written and oral – with the ability to articulate complex architectural concepts and technical strategies clearly to both technical teams and senior non-technical government stakeholders. - Deep, hands-on expertise with the Okta platform, including SSO, MFA, Adaptive Authentication, Universal Directory, Lifecycle Management, Okta Workflows, API Access Management, and Okta Identity Engine (OIE). - Deep, hands-on expertise with SailPoint IdentityIQ (IIQ) and/or SailPoint Identity Security Cloud (ISC), including identity lifecycle management, access certifications, role management, SoD policy enforcement, and automated provisioning workflows. - Demonstrated experience designing and implementing enterprise-scale ICAM architectures that integrate Okta and SailPoint with complex, heterogeneous IT environments including on-premises, hybrid, and cloud infrastructures. - Expert-level knowledge of identity federation protocols and standards, including SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), SCIM, and LDAP, and their architectural application within enterprise ICAM solutions. - Strong understanding of Zero Trust Architecture principles and their practical application to ICAM platform design and implementation within a federal environment. - Comprehensive knowledge of federal ICAM frameworks and identity management standards, including FICAM, NIST SP 800-63, NIST SP 800-53, and relevant OMB policies and mandates. - Experience leading architecture review boards, technical design reviews, and platform governance processes. - Proven ability to develop comprehensive technical documentation, including reference architectures, solution design documents, architecture decision records, and integration blueprints. - Experience integrating ICAM platforms with enterprise applications, cloud services, and legacy systems via REST APIs, SCIM, SOAP, and native connectors. - Strong knowledge of Active Directory (AD), Azure Active Directory (AAD/Entra ID), and LDAP directory services and their integration with Okta and SailPoint. - Experience supporting ATO processes and contributing to federal security documentation, including SSPs, SARs, RARs, and POA&Ms. - Demonstrated ability to provide technical mentorship and leadership to engineering teams in a federal IT environment. - Strong analytical and problem-solving skills, with the ability to resolve complex, high-impact technical challenges across enterprise ICAM environments. Benefits - Competitive compensation. - Extraordinary benefits package including health, dental and vision insurance. - 401K with company matching. - Flexible spending accounts. - Paid holidays. - Three weeks paid time off. - And more.

Okta SSO Identity Governance CI/CD AI SAML OAuth 2.0 OpenID Connect LDAP REST API SOAP Active Directory Azure

View details: Lead Platform Architect

United States

Apply

ICAM Pen Tester

Koniag Government Services, LLC

QA Engineer2 days ago

Full Time Remote Mid LevelTeam 1,001-5,000

Role Description Koniag IT Systems, LLC, a Koniag Government Services company, is seeking an experienced ICAM Penetration Tester to join a team supporting Identity, Credential, and Access Management (ICAM) solutions for our government customers. The ideal candidate is a highly skilled and technically proficient security professional with deep expertise in penetration testing methodologies and a strong understanding of identity and access management architectures, protocols, and technologies in a federal environment. This individual will play a critical role in proactively identifying and assessing vulnerabilities within ICAM systems and infrastructure, helping to strengthen the overall security posture of mission-critical identity and access management programs. The ICAM Penetration Tester will be responsible for planning, executing, and reporting on penetration tests and security assessments targeting ICAM systems, infrastructure, and related integrations in a federal government environment. This individual will work closely with ICAM engineers, information system security managers (ISSMs), security teams, and government stakeholders to identify vulnerabilities, assess risk, and provide actionable remediation recommendations that strengthen the security of identity and access management solutions. - Plan, scope, and execute penetration tests and security assessments against ICAM systems, platforms, and integrations, including identity providers, access management solutions, directory services, and federation components. - Conduct targeted security assessments of ICAM-specific attack surfaces, including authentication mechanisms, authorization controls, identity federation protocols, single sign-on implementations, multi-factor authentication configurations, and privileged access management systems. - Perform adversarial simulations and red team exercises focused on identity-based attack techniques, including credential theft, privilege escalation, lateral movement, token manipulation, session hijacking, and identity spoofing. - Assess the security of ICAM protocols and standards implementations, including SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), LDAP, and Kerberos, identifying misconfigurations and exploitable weaknesses. - Conduct vulnerability assessments and security reviews of ICAM platform configurations, including Okta, SailPoint, Active Directory, and related identity infrastructure components. - Perform web application penetration testing against ICAM portals, administrative consoles, APIs, and self-service interfaces. - Conduct API security testing against ICAM REST and SCIM APIs, identifying vulnerabilities such as broken object level authorization, excessive data exposure, and injection flaws. - Simulate social engineering and phishing attacks targeting identity credentials and authentication mechanisms to assess human and technical control effectiveness. - Document and communicate penetration test findings in clear, detailed reports tailored to both technical and executive audiences, including vulnerability descriptions, risk ratings, evidence, and actionable remediation recommendations. - Collaborate with ICAM engineers, administrators, and ISSMs to validate and prioritize remediation efforts and re-test vulnerabilities following remediation activities. - Support the development and maintenance of penetration testing methodologies, playbooks, and procedures specific to ICAM environments. - Contribute to threat modeling activities, identifying potential attack vectors and adversarial techniques relevant to ICAM architectures and federal identity management programs. - Stay current with the latest identity-related vulnerabilities, attack techniques, threat actor tactics, techniques, and procedures (TTPs), and emerging security research relevant to ICAM. - Support ATO processes by contributing findings and security assessment results to security documentation, including Security Assessment Reports (SARs) and Plans of Action and Milestones (POA&Ms). - Provide technical guidance and recommendations on ICAM security hardening, secure configuration baselines, and identity security best practices. - Participate in purple team exercises, collaborating with defensive security teams to improve detection and response capabilities for identity-based attacks. Qualifications - Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field from an accredited college or university; equivalent work experience may be considered in lieu of a degree. - 4+ years of hands-on experience conducting penetration tests and security assessments in an enterprise or federal government IT environment. - 2+ years of experience performing security assessments specifically targeting identity and access management systems, protocols, or infrastructure. - Active Secret Clearance required. Requirements - Exceptional communication skills in English – both written and oral – with the ability to clearly communicate complex technical vulnerabilities and risks to both technical and non-technical audiences, including senior leadership and government stakeholders. - Demonstrated hands-on experience planning and executing penetration tests using industry-standard methodologies, including PTES (Penetration Testing Execution Standard), OWASP Testing Guide, and MITRE ATT&CK framework. - Deep understanding of identity and access management attack techniques and adversarial tactics, including credential harvesting, pass-the-hash, pass-the-ticket, Kerberoasting, golden ticket attacks, token forgery, OAuth abuse, and SAML injection. - Strong knowledge of ICAM protocols and their associated vulnerabilities, including SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), LDAP, Kerberos, and SCIM. - Experience conducting web application penetration testing, including testing of authentication and authorization mechanisms, session management, and API security. - Proficiency with penetration testing tools and frameworks, including Metasploit, Burp Suite, Cobalt Strike, BloodHound, Impacket, Mimikatz, or equivalent toolsets. - Experience assessing Active Directory environments for identity-related vulnerabilities, misconfigurations, and attack paths. - Familiarity with Okta, SailPoint, or similar ICAM platforms and the ability to assess their configurations for security weaknesses. - Experience developing detailed, high-quality penetration test reports with clear vulnerability descriptions, risk ratings, evidence, and remediation recommendations. - Knowledge of common vulnerability scoring systems, including CVSS, and the ability to accurately assess and communicate risk severity. - Strong understanding of network protocols, operating systems, and cloud environments and their intersection with identity security. - Familiarity with NIST SP 800-115 (Technical Guide to Information Security Testing and Assessment) and other federal security assessment standards. - Ability to work collaboratively with defensive security teams, ICAM engineers, and government stakeholders in a responsible and professional manner. Benefits - Competitive compensation. - Extraordinary benefits package including health, dental and vision insurance. - 401K with company matching. - Flexible spending accounts. - Paid holidays. - Three weeks paid time off. - And more.

SAML OAuth 2.0 OpenID Connect LDAP Kerberos Okta Active Directory

View details: ICAM Pen Tester

United States

Apply

606more opportunities are still waiting for you.Log in now and take your next shot before someone else does.

How We Keep Listings Searchable

Listings are indexed by role, location eligibility, salary signals, and tech stack to make filtering dependable for both broad and niche remote searches.

For best results, use one primary role filter first, then add compensation and stack constraints.

How To Search Faster Across Remote Roles

Role first, stack second

Select role intent first, then add tech stack filters to reduce overlap between adjacent categories like frontend, full stack, and product engineering.

Use seniority and employment type together

Combining seniority and employment type usually improves match precision and lowers page-by-page browsing time.

Check hourly updates for active windows

Listings refresh continuously, so revisiting role pages with fresh filters helps catch newly opened positions.

Related Remote Job Categories

Remote Frontend Jobs Remote Backend Jobs Remote Full Stack Jobs Remote Entry-Level Jobs Remote Full-time Jobs US-Only Remote Jobs

Remote Job Search Guides

All Guides US Remote Salary Guide Remote Interview Prep Remote Resume Tips

Frequently Asked Questions

Answers to common questions about remote job search, filters, and listing coverage.

What types of remote jobs are listed here?

You can find engineering, product, design, data, and operations roles from startups and larger companies.

How often are listings updated?

Listings are updated hourly to keep results fresh.

How can I find jobs that match my skills?

Use title, tech stack, salary, and location filters to narrow results to roles that match your background.

Are salary ranges always available?

Not every employer shares compensation, but when provided, salary data appears in filters and job cards.