Principal Identity Architect

Key details

Full job description

Lead Epsilon’s identity modernization from legacy SAML and long-lived credentials to OAuth 2.1 / OpenID Connect (OIDC). Design secure, scalable identity patterns across multi-cloud environments. Partner with Security, Cloud, Platform, and Engineering teams to replace API keys and service accounts with scoped, ephemeral machine identities. Establish enterprise standards and deliver secure, developer-friendly integrations. Responsibilities include leading OAuth 2.1 / OIDC adoption, designing secure token flows, defining token standards, reducing token risks, replacing long-lived credentials with machine identity patterns, designing M2M authentication, building reusable identity patterns across IdPs and cloud platforms, troubleshooting auth issues, applying Zero Trust principles, improving identity logging and governance, mentoring engineers, and leading incident response. Requirements: Bachelor’s or Master’s in Computer Science or related field, 7+ years in IAM/security engineering/platform roles, 3+ years hands-on OAuth 2.0 / OIDC experience, expertise in token flows and secure design, experience with machine identity and identity modernization, knowledge of AWS/Azure/GCP identity services, leadership ability, and scripting skills in Python/Bash. Benefits include flexible time off, paid holidays and sick time, parental leave, childcare and elder care assistance, adoption assistance, comprehensive health coverage, 401(k), tuition assistance, commuter benefits, professional development, employee recognition, charitable donation matching, and health coaching.