Staff Information Security Engineer- Eng

Why UKG:  

At UKG, the work you do matters. The code you ship, the decisions you make, and the care you show a customer all add up to real impact. Today, tens of millions of workers start and end their days with our workforce operating platform. Helping people get paid, grow in their careers, and shape the future of their industries. That’s what we do.

We never stop learning. We never stop challenging the norm. We push for better, and we celebrate the wins along the way. Here, you’ll get flexibility that’s real, benefits you can count on, and a team that succeeds together. Because at UKG, your work matters—and so do you.

About the Role

UKG is seeking a highly skilled Staff Information Security Engineer to join our Identity & Access Management (IAM) team. In this role, you will provide technical leadership in building, automating, and operating secure, scalable, and resilient IAM platforms. You will drive DevSecOps best practices across identity services, enabling secure software delivery, infrastructure automation, and cloud-native security.
As a Staff Engineer, you will collaborate closely with Security, Platform Engineering, Cloud Infrastructure, Product Engineering, and DevOps teams to improve platform reliability, accelerate deployments, and strengthen UKG's identity security capabilities through automation and engineering excellence.

Key Responsibilities
• Design, build, and maintain secure, scalable, and highly available IAM platform infrastructure.
• Lead DevSecOps initiatives by implementing CI/CD pipelines, Infrastructure as Code (IaC), and automated deployment strategies.
• Develop automation for IAM platform provisioning, configuration management, monitoring, patching, and operational workflows.
• Partner with IAM engineering teams to automate deployment and lifecycle management of identity platforms and security services.
• Design and implement cloud-native architectures supporting high availability, resiliency, and disaster recovery.
• Build reusable automation frameworks using scripting languages and infrastructure automation tools.
• Integrate security controls, secrets management, certificate management, and policy enforcement into CI/CD pipelines.
• Establish platform observability through logging, monitoring, alerting, and performance optimization.
• Lead root cause analysis for complex production issues and implement long-term reliability improvements.
• Drive engineering standards, platform modernization, and operational excellence across IAM services.
• Mentor engineers, conduct design and code reviews, and promote DevSecOps best practices throughout the organization.
• Collaborate with cross-functional teams to ensure security, compliance, and operational requirements are incorporated into engineering solutions.

Required Qualifications
• Bachelor's degree in computer science, Information Technology, Cybersecurity, or a related field.
• 8+ years of experience in DevOps, Platform Engineering, Site Reliability Engineering (SRE), Cloud Engineering, or Security Engineering.
• Strong experience designing and supporting enterprise CI/CD platforms using tools such as GitHub Actions, Jenkins, Azure DevOps, or GitLab CI.
• Hands-on experience with Infrastructure as Code using Terraform, Ansible, or similar automation frameworks.
• Experience with container technologies including Docker and Kubernetes/OpenShift.
• Strong expertise in Linux administration and scripting using Python, Bash, or PowerShell.
• Experience with public cloud platforms, preferably AWS, Azure, or Google Cloud Platform.
• Experience implementing monitoring and observability solutions such as Prometheus, Grafana, Splunk, Datadog, or ELK.
• Working knowledge of identity and access management concepts, including authentication, authorization, RBAC, SSO, and federation.
• Experience integrating secrets management and certificate management solutions such as HashiCorp Vault, Google Secret Manager, DigiCert, or similar technologies.
• Strong understanding of DevSecOps principles, secure software delivery, and cloud security best practices.

Preferred Qualifications
• Experience supporting enterprise IAM platforms such as Saviynt, SailPoint, Ping Identity, Okta, Microsoft Entra ID, or CyberArk.
• Experience implementing Zero Trust architecture and security automation.
• Knowledge of authentication protocols including OAuth 2.0, OpenID Connect (OIDC), SAML, LDAP, and SCIM.
• Experience working in Agile environments and leading technical initiatives across distributed teams.
• Relevant certifications in AWS, Azure, Kubernetes (CKA), Terraform, HashiCorp Vault, or Security (CISSP, Security+, etc.) are highly desirable.

Technical Skills
• DevSecOps & CI/CD
• GitHub Actions, Jenkins, Azure DevOps, GitLab CI
• Terraform, Ansible
•