First American Financial Corporation

Principal Identity Engineer - Cloud IAM / CIAM (Remote)

California, USA · Principal · full-time

Sponsorship not specified$171k-$228kDetected 74 days ago

PythonBashGitAWSGCPAzureCloud PlatformsTerraformCI/CDOAuthCybersecurityIncident ResponseZero TrustCISSP

About the role

Since 1889, First American (NYSE: FAF) has held an unwavering belief in its people.
Our inclusive, people-first culture has earned our company numerous accolades, including being named to the Fortune 100 Best Companies to Work For list for eleven consecutive years.
We have also earned awards as a best place to work for women, diversity and LGBTQ+ employees, and have been included on more than 50 regional best places to work lists.

Define secure, scalable identity patterns for workforce, partner, and customer access that align with security, risk, and compliance requirements.
Design and operationalize a Zero Trust identity model with continuous verification, risk-based access, and adaptive authentication.
Reduce standing privilege through least privilege design, just-in-time (JIT) access, and standardized entitlement models.
Design and evolve customer identity (CIAM) solutions supporting web, mobile, and API platforms.
Define and lead an enterprise IAM-as-Code program using Terraform and GitHub.
Build reusable, versioned modules and establish PR-based workflows with auditability, approvals, and security guardrails.
Develop automation in Python, Bash, and JSON to scale identity operations and reduce manual risk.
Support policy management, bulk changes, integrations, and identity-related incident response and diagnostics.
Proven ability to design cloud-agnostic IAM models and implement them consistently across platforms.
Strong scripting and automation skills in Python, Bash, and JSON, including CI/CD and guardrail design.

Bachelor's degree or equivalent experience, with extensive background in enterprise security engineering.

Deep hands-on experience designing and operating identity platforms at scale in complex environments.
Advanced expertise across Microsoft Entra ID, AWS IAM, and Google Cloud IAM, with OCI experience a plus.
Strong background in IAM security architecture, governance, and risk-based access controls.
Hands-on experience with least privilege design, JIT access, Zero Trust identity, and RBAC/ABAC models.
Expert knowledge of OAuth 2.0, OpenID Connect, and SAML.
Proven experience delivering enterprise-scale SSO and MFA solutions.
Demonstrated experience establishing IAM-as-Code using Terraform with GitHub-based change control.
Experience architecting and operating customer identity platforms for portals, mobile apps, and APIs. (preferred) Ability to communicate complex identity concepts to both technical and non-technical audiences.

$170,900.00 - $227,900.00 Annually This hiring range is a reasonable estimate of the base pay range for this position at the time of posting.

Based on eligibility, First American offers a comprehensive benefits package including medical, dental, vision, 401k, PTO/paid sick leave and other great benefits like an employee stock purchase plan.

Join a team that puts its People First!
They are passionate about what they do, and we are equally passionate about fostering an environment where all feel welcome, supported, and empowered to be innovative and reach their full potential.
First American will always strive to be a great place to work, for all.
For more information, please visit;br> What We Do We are open to remote or hybrid candidates for this role.
As a Principal Identity Engineer, you will own the technical strategy, architecture, and engineering execution for enterprise Identity and Access Management (IAM) across First American's cloud and hybrid environments.
This role is central to strengthening our security posture by delivering secure, scalable identity capabilities across our cloud environments (Azure AD/AWS/Google Cloud Platform).
You will lead workforce IAM, partner/federation (B2B), and customer identity (CIAM) architecture where applicable; establish Zero Trust identity controls; and set enterprise standards for IAM-as-code using Terraform + GitHub with automation in Python/Bash/JSON.
This is a hands-on principal role requiring deep technical expertise, cross-org influence, and the ability to build repeatable platforms and guardrails teams can safely self-serve.
Who We Are Join a team that puts its People First!
We are proud to foster an authentic and inclusive workplace For All.

This listing is sourced directly from First American Financial Corporation's careers page and normalized into a canonical job model.