Senior Identity and Access Management Engineer

Job Summary   The Senior Engineer, Identity & Access Management designs, implements, and operates secure, scalable identity solutions across the enterprise. This hands-on senior engineering role helps protect UFCU's digital ecosystem by ensuring that users and systems have appropriate access to resources at the right time. This role partners with Information Security, Platform Engineering, Product Engineering, Infrastructure, and Application teams to embed identity and access controls into UFCU's platforms, applications, and workflows.

  The Senior Engineer, Identity & Access Management is an exempt position and reports to the Director, Information Security, and is part of the Information Security team at UFCU.   About UFCU Our Credit Union was founded in 1936 and has grown to serve members throughout Texas and beyond. At UFCU, we are more than just a financial institution, and our people are more than just employees.

We are dedicated to our purpose of empowering our Members to achieve financial success and build brighter futures . In pursuit of our aspiration that UFCU is loved by millions of Members and built to thrive for generations , we are guided by our values: Purposefully Member-Obsessed: We are driven by a profound sense of empathy to deeply understand our Members’ needs and preferences, what brighter futures means to them, and the obstacles in their way.

We act in our Members’ best interests, forever seeking to empower their financial success. Possibilities Reimagined: We are inspired to courageously experiment, learn, and iterate in pursuit of positive impact for our Members, UFCU, and coworkers. We challenge assumptions, embrace diverse perspectives, and make use of data and insights. Performance Excellence Rooted in Unwavering Integrity: We do the right thing, always.

We champion teamwork, accountability, continuous improvement, and celebrate successful outcomes of others, fostering an inclusive environment of excellence and collaboration. Essential Functions   Identity & Access Management Engineering and Architecture   Design, implement, and support enterprise identity and access management solutions across workforce, Member, third-party, and non-human identities, including service accounts, workload identities, and artificial intelligence agents.

  Engineer secure authentication and authorization mechanisms, including single sign-on, multifactor authentication, passwordless authentication using Fast Identity Online 2 and passkeys, credential sharding, including conditional and risk-based access schemas.   Implement and maintain role-based access control and attribute-based access control aligned with least privilege, least agency, and separation-of-duties principles.

  Support the key management program, including certificate lifecycle management, secrets management, and application programming interfaces and model context protocol (MCP) client and server access.   Embed identity controls and secure protocols into continuous integration and continuous delivery pipelines, Infrastructure as Code, and modern application architectures.

  Identity Governance, Privileged Access, and Threat Response   Deploy and manage leading-edge Identity Governance and Administration platforms.   Conduct access certifications for regulatory compliance and manage access-request workflows, entitlement management, and role-lifecycle governance.   Develop centralized, cross-team processes and procedures related to all joiner, mover, and leaver activities.

  Implement and manage Privileged Access Management solutions using just-in-time and just-enough-access models; monitor and audit privileged activity and session recording.   Deploy Identity Threat Detection and Response capabilities; monitor identity-related