Skip to main content
CareerApp
Levi Strauss & Co.

Sr. Security Engineer – IAM

Levi Strauss & Co.

full time · Senior

Listed on Levi Strauss & Co.’s own careers site. You apply with them directly — we never stand between you and the employer.

What this role is

A hands-on identity and access management engineer role focused on designing and maintaining enterprise Microsoft identity services, privileged access management platforms, and identity governance solutions for a global organization. This position suits experienced security engineers who want to architect and operate complex IAM infrastructure while driving compliance and automation across enterprise systems.

Our summary, not Levi Strauss & Co.’s wording. The full posting is on their site.

What they ask for

Required

  • Hands-on experience with Microsoft Entra ID and MFA
  • Experience with SSO federation technologies (SAML, OIDC, OAuth)
  • Hands-on experience with Conditional Access
  • Experience with Privileged Identity Management (PIM) and Just-In-Time administration
  • Hands-on experience with Microsoft Defender for Identity
  • Hands-on experience with Microsoft Graph API
  • Hands-on experience with at least one enterprise PAM platform (Delinea, CyberArk, BeyondTrust, or similar)
  • Experience implementing and administering one or more IGA platforms (Saviynt, SailPoint, Microsoft Identity Governance, or similar)
  • Strong scripting and automation experience with Python, PowerShell, KQL, and REST APIs

Nice to have

  • Experience securing hybrid Active Directory and cloud environments
  • Experience supporting large global enterprises
  • Familiarity with Zero Trust security principles
  • Experience designing identity architectures at enterprise scale
  • Knowledge of compliance frameworks and audit requirements
  • Security certifications such as SC-300, AZ-500, CISSP, or identity-focused Microsoft certifications

Turn on analytics and we load Google Analytics: Google gets the pages you open and what you do here — searches, jobs you view, jobs you apply to — and sets its own cookies. Leave it off and the only cookies we set are your login, your theme, and this answer. Accept All also records a yes to advertising, which nothing uses yet. Privacy Policy.