LendingClub

LendingClub

Principal IAM Engineer

San Francisco, CA · Principal

Sponsorship not specified$197k-$232kDetected 30 days ago
GitAWSCloud PlatformsTerraformAgentic AICybersecurityDetection EngineeringComplianceAuditingHRISZero TrustCollaborationMentoringInternal Audit

Stay score

odds of building a lasting career here

56Sponsors, lottery-bound
Cap-exempt (no lottery)0
Sponsors this role72
Entry-level history0
PERM / green-card track0
Lottery odds (Level IV)94
Fits your clock70

Sponsors, but it's cap-subject — you still face the weighted lottery (~61% per draw at Level IV). Good if you win; have a cap-exempt backup on your list.

Lottery odds assume a STEM candidate.

Personalize to your clock →

Community outcomes

No reports yet — be the first to help the next applicant.

About the role

  • The Principal Identity Security Engineer will lead the design and evolution of Happen Bank's enterprise identity security capabilities, helping ensure secure, scalable, and compliant access for employees, contractors, applications, cloud platforms, and non-human identities.
  • This role will set technical direction, drive complex cross-functional initiatives, establish engineering standards, champion the responsible adoption of AI across identity engineering, and continuously improve how identity services are designed, governed, and operated across the bank.

Responsibilities

  • Design and deliver scalable identity solutions across SailPoint, Okta, Active Directory, AWS, Terraform, and GitHub, staying hands-on in architecture, automation, integrations, and troubleshooting when needed
  • Own the design and operation of privileged access management on Delinea (Thycotic) Secret Server, including vaulting, secret rotation, discovery, session controls, and privileged account lifecycle across the enterprise
  • Build automation, APIs, and Infrastructure-as-Code - and establish AI-assisted engineering workflows - that improve provisioning, access governance, lifecycle management, and engineering quality while maintaining appropriate security, governance, and regulatory controls
  • Lead complex identity initiatives from strategy through implementation, partnering with Security, Infrastructure, Risk and Internal Audit to support examinations, control design, remediation, and sustainable resolution of identity-related findings
  • Raise the technical bar of the identity function through mentorship, design reviews, vendor evaluations, and proof-of-concept initiatives
  • Experience building automation through scripting, Infrastructure-as-Code, AI-assisted development practices, and sound software engineering principles
  • Demonstrated ability to mentor engineers, improve technical standards, influence senior stakeholders, and drive organizational change without direct authority
  • You establish a high bar for responsible AI adoption by considering data integrity, security, model limitations, privacy, and regulatory requirements, and you continuously evolve engineering practices by building new AI-enabled workflows rather than simply automating existing ones

Requirements

  • Strong hands-on experience with SailPoint or another enterprise IGA platform, Okta, Active Directory, AWS identity services, Terraform, GitHub, and identity automation
  • Hands-on production experience with enterprise privileged access management, ideally Delinea (Thycotic) Secret Server - including vaulting, rotation, discovery, and privileged account lifecycle
  • Strong understanding of SOX, FFIEC, OCC, PCI DSS, NIST, least privilege, segregation of duties, control design, and audit evidence requirements

Nice to have

  • Experience designing non-human identity or machine identity programs at scale
  • Experience designing identity, authorization, and governance controls for AI agents, including identity guardrails, least-privilege access, and policy enforcement
  • Experience with cloud identity and workload identity patterns in AWS or comparable cloud environments
  • Experience evaluating identity technologies and leading vendor selection or proof-of-concept initiatives
  • Happen Bank offers relocation, based on actual job level.
  • Time Zone Requirements
  • Local hours (PT)
  • 10+ years of experience in identity and access management (IAM), Information Security or Security Engineering

Compensation

  • The target base salary range for this position is 197,000-232,000.
  • The base salary of the role will be determined by job-related knowledge, experience, education, skills, and location.
  • Base salary is just one part of Happen Bank's Total Rewards package.
  • You may also be eligible for long-term awards (equity) and an annual bonus (which is based on company performance, employee performance and eligible earnings).

Benefits

  • You may also be eligible for long-term awards (equity) and an annual bonus (which is based on company performance, employee performance and eligible earnings).
  • We will only share your interview, transcription, or summary with persons whose expertise or technology is necessary to process your application, evaluate your fitness for a position, and administer or support the tool.

Company info

  • Respect and fairness is part of our DNA, and that ideal shapes how we work, how we treat each other, and how we invest in our employees and our community.
  • Base salary is just one part of Happen Bank's Total Rewards package.
  • We are committed to providing reasonable accommodations for qualified individuals with disabilities in our job application process.
  • We are committed to providing reasonable accommodations for qualified individuals with disabilities in our job

Equal opportunity

  • If you need assistance or an accommodation due to a disability, please contact us at interviewaccommodations@happen.com.
  • equal opportunity employer and dedicated to diversity, equity, and inclusion in the workplace.

Visa & Work Authorization

  • You will have the opportunity to opt out of recording, transcription, and summarization prior to any scheduled interviews.
  • We will not discriminate against you if you choose to opt out.
Apply directly at LendingClub →Create a free account for alerts like thisView LendingClub immigration profile

This listing is sourced directly from LendingClub's careers page and normalized into a canonical job model.