Senior Cybersecurity Engineer, Identity DevOps and Platform Automation

About the role

Rivian is looking for a senior‑level cybersecurity engineer to design, build and improve identity and access management (IAM) services and automation that protect the company’s people, applications and data. The role combines deep identity expertise with strong delivery habits, covering design, validation and operational support of IAM platforms.

Key responsibilities

• Design and deliver enhancements to Microsoft Entra ID, Microsoft Graph, tenant governance and enterprise application configurations.
• Build and operate IAM automation, CLIs, APIs and self‑service workflows using Git‑based change, CI/CD and infrastructure‑as‑code on AWS.
• Create and improve identity governance and lifecycle processes, including access requests, approvals, provisioning and de‑provisioning.
• Support application onboarding via SAML, OIDC and SCIM, turning repeatable patterns into reusable automation.
• Increase platform observability, alerting and drift detection to simplify diagnosis and ongoing improvement.
• Participate in an on‑call rotation, handling incidents and contributing to runbooks and recovery plans.

Required profile

• 5+ years of hands‑on experience in IAM, identity platform engineering or related cybersecurity fields.
• Deep practical knowledge of Microsoft Entra ID, Microsoft Graph and Conditional Access policies.
• Proficiency building automation with Python, PowerShell or Go and delivering it through Git, CI/CD pipelines and IaC tools such as Terraform or CloudFormation.
• Familiarity with lifecycle, governance (RBAC/ABAC), SSO/federation (SAML, OAuth, OpenID Connect), provisioning (SCIM) and Zero Trust concepts.
• Experience supporting production systems, including monitoring, incident response and continuous improvement.

Required skills

• Microsoft Entra ID
• Microsoft Graph
• Python
• PowerShell
• Go
• Git
• CI/CD pipelines
• Terraform
• CloudFormation
• AWS (Lambda, EventBridge, SQS, SNS, ECS, Kubernetes)
• SAML
• OpenID Connect
• SCIM
• Conditional Access
• Zero Trust access patterns