Senior Engineer (IT Security)

Join Chartis IT Security as a Senior Engineer (IT Security) to support and scale security across cloud-native and AI-driven engineering teams. This hands-on engineering role focuses on identity, automation, and platform security, enabling engineering teams to build and deploy securely without unnecessary friction. You will partner with engineering teams to design secure architectures and solutions, integrate security controls into CI/CD pipelines, and provide technical guidance for secure development.

• Partner with engineering teams to design secure architectures and solutions, and integrate security controls into CI/CD pipelines.
• Own and improve the application onboarding and identity integration process, translating security requirements into practical, scalable, and automated controls.
• Provide technical guidance and reusable patterns for secure development, and collaborate closely with developers while maintaining clear ownership within the Security team.
• Demonstrated experience integrating security into CI/CD pipelines and infrastructure-as-code workflows
• Application onboarding, lifecycle management, and policy enforcement
• Strong understanding of modern authentication and authorization standards, including OAuth2, OIDC, and SAML
• Proficiency in Python scripting for automation, integration, and operational tooling
• Working knowledge of AWS and Google Cloud Platform in multi-cloud environments
• Demonstrated experience performing threat modeling (e.g., STRIDE, attack trees) and translating findings into actionable engineering controls
• 5–8+ years of hands-on experience in security engineering with a direct focus on IAM and DevSecOps practices (no purely advisory or oversight roles)
• Strong, hands-on cloud administration experience in Microsoft Azure (required), including identity, access control, and resource governance
• Experience designing and implementing RBAC/ABAC models across cloud and SaaS platforms
• Working knowledge of Splunk Cloud, including building alerts, dashboards, and detection logic for security-relevant events
• Proven, hands-on administration and engineering experience with Okta, including:
• Okta Workflows
• Okta Identity Cloud (OIC)
• Okta Identity Governance (OIG)
• Hands-on experience with Kubernetes (K8s), including workload identity, access controls, and platform security considerations
• Okta certifications (e.g., Okta Certified Administrator, Okta Certified Professional, or equivalent advanced certification)
• Experience supporting AI/ML platforms or AI-enabled application ecosystems
• Experience with secrets management and zero trust architecture patterns
• Experience with tools like LangSmith and other AI related tools