Senior Identity Engineer

About this position

As a Senior Security Engineer at Later, you will play a critical role in strengthening and scaling the security foundations that power our platform. This role blends deep security expertise with hands-on engineering, with a particular focus on identity and access management, authentication systems, and secure-by-design development practices.

You’ll partner closely with Engineering, Infrastructure, and Product teams to embed security into our CI/CD pipelines, internal platforms, and customer-facing systems—enabling teams to move quickly while keeping our systems, data, and users safe. This is a high-impact individual contributor role for someone who thinks like a defender, builds like a software engineer, and leads through influence.

What you'll be doing

Strategy

• Assess and continuously improve Later’s security posture across applications, infrastructure, and development workflows
• Define and implement scalable security standards, guardrails, and best practices that support compliance through automated and auditable solutions
• Partner with Engineering and Product leadership to align security priorities with business objectives and delivery timelines
• emerging risks and proactively design systems and processes that reduce long-term exposure

Technical/ Execution

• Own identity and access management across Later’s platform, including authentication, authorization, and secure machine-to-machine (M2M) processes
• Design, implement, and maintain secure authentication systems for both internal tools and customer-facing experiences
• Harden login systems, establish consistent authentication patterns across services, and ensure secure integration between tools
• Build and maintain internal security tooling to support secure development, operational visibility, and compliance workflows
• Embed security controls into CI/CD pipelines, including SAST, DAST, SCA, container scanning, secret management, and secure build/deploy practices
• Partner with engineering teams to identify vulnerabilities, clearly communicate risk and impact, and drive effective remediation

Team / Collaboration

• Provide pragmatic, solution-oriented security guidance during system design and architecture reviews