Lead Information Security Engineer - Authentication

USAA is building and modernizing enterprise authentication and privileged access capabilities with a strong Zero Trust lens. In this hybrid/remote-eligible role in Plano, TX, you will set technical direction for workforce identity services and lead engineering work across complex authentication ecosystems and security controls.

Role Overview

You will be responsible for the architecture, engineering, and strategic direction of enterprise authentication and privileged access management capabilities. The work includes modernizing workforce identity services across platforms such as Okta Workforce Identity Engine, Microsoft Entra ID, Active Directory, and federation or authentication protocols, while ensuring secure, scalable, user-friendly access across the enterprise.

What You’ll Do

• Ensure security requirements are addressed across the solution/application enablement and sustainment lifecycle.
• Design, develop, code, integrate, and test complex cross-functional technical solutions with a security focus, collaborating beyond your immediate team when needed.
• Lead code and design reviews, and drive engineering efficiencies to support accurate planning and effective operations.
• Independently resolve complex production issues and lead troubleshooting for end-to-end solutions spanning multiple applications and systems.
• Partner with architecture to define direction for cross-functional or highly complex key technologies within a specific security domain.
• Apply Site Reliability Engineering practices in your domain.
• Act as a subject matter expert and influence cross-functional initiatives across USAA.
• Monitor and troubleshoot highly complex systems, tools, and vendor integrations, performing continuous research, analysis, and troubleshooting to identify, resolve, and report security issues.
• Collaborate with Security Analysts, IT, and business partners to tune, harden, and enhance security solutions and technologies.
• Mentor junior engineers, support continuous learning, and help ensure the team stays current with security trends and technologies.
• Identify, measure, monitor, and control risks tied to business activities in alignment with risk and compliance policies and procedures.

Minimum Qualifications

• Bachelor’s degree; OR 4 years of relevant education and/or experience.
• 8 years of related experience in Security Engineering and/or Information Technology with a security focus, including experience leading company-wide technology projects or initiatives.

Key Experience

• Architecting, engineering, and supporting enterprise authentication solutions using Okta Workforce Identity Engine, Microsoft Entra ID, Active Directory, ADFS, and related identity provider technologies.
• Designing and implementing authentication integrations using SAML, OpenID Connect (OIDC), OAuth, and other federation protocols across large, complex application environments.
• Defining authentication standards, reference architectures, engineering patterns, and technical roadmaps as a senior technical authority for authentication and identity services.
• Hands-on experience implementing MFA, adaptive authentication, risk-based access controls, passwordless authentication, conditional access, and Zero Trust security principles in enterprise environments.
• Leading and owning security strategies, solutions, and/or initiatives through to successful completion.
• Addressing complex production issues through application and system troubleshooting.
• Advising on security architecture methods and controls to meet security, compliance, and audit requirements.

Technologies

• Okta Workforce Identity Engine
• Microsoft Entra ID
• Active Directory
• ADFS
• SAML
• OpenID Connect (OIDC)
• OAuth
• MFA
• Passwordless authentication
• Adaptive authentication
• Risk-based access controls
• Conditional access
• Zero Trust
• Site Reliability Engineering

Location / Travel

• Remote eligible in the continental U.S., with occasional business travel.
• Individuals residing within a 60-mile radius of a USAA office are expected to work on-site four days per week.

Compensation

• USD 142,320 - 273,930 per year.

Benefits

• Comprehensive medical, dental and vision plans
• 401(k)
• Pension
• Life insurance
• Parental benefits
• Adoption assistance
• Paid time off program with paid holidays plus 16 paid volunteer hours
• Wellness programs
• Career path planning and continuing education

Visa Sponsorship

USAA does not provide visa sponsorship for this role.