Role overview

Later is an AI-powered influencer marketing platform trusted by leading enterprise brands including Nike, Wayfair, Unilever, and Southwest Airlines. As a Senior Identity Engineer, you will strengthen and scale the security foundations across Later’s platform, with a focus on identity and access management, authentication systems, and secure development practices. This individual contributor role balances deep security expertise with hands-on engineering, partnering across teams to embed security into systems while maintaining deployment velocity.

Key responsibilities

Assess and continuously improve Later’s security posture across applications, infrastructure, and development workflows, defining scalable security standards and guardrails that support compliance through automated solutions.
Own identity and access management across the platform, including designing and maintaining secure authentication systems for internal tools and customer-facing experiences.
Embed security controls into CI/CD pipelines, including SAST, DAST, SCA, container scanning, secret management, and secure build and deployment practices.
Identify vulnerabilities, communicate risk and impact clearly, and drive effective remediation in partnership with engineering teams.
Provide pragmatic security guidance during system design and architecture reviews, translating complex security concepts into actionable recommendations for technical and non-technical stakeholders.
Lead by influence by raising the security bar through standards, tooling, and mentorship, helping engineering teams adopt a proactive security mindset.
Stay current on application security, cloud security, and identity best practices, applying industry frameworks such as OWASP, NIST, and CIS Controls within production environments.

Requirements

Five to seven or more years of experience as a Security Engineer or Software Engineer with a strong security focus.
Proven experience building and operating production-grade software, systems, or internal tooling.
Strong background in application security, infrastructure security, and secure CI/CD practices.
Hands-on experience with identity and access management, including authentication systems, authorization frameworks, and machine-to-machine security patterns.
Experience applying security frameworks such as OWASP, NIST, or CIS Controls in real-world production environments.
Familiarity with cloud security tooling such as AWS Security Hub, Azure Security Center, or GCP Security Command Center, SIEM/SOAR tools, and Infrastructure-as-Code security scanning tools like Terraform or CloudFormation.
Experience supporting compliance frameworks such as SOC 2 and ISO 27001, and familiarity with modern backend systems including C# and cloud-native architectures.

What makes this role worth considering

This position offers the opportunity to influence security across a high-growth technology environment where your work directly impacts enterprise-scale systems. You will work at the intersection of security strategy and engineering execution, partnering with multiple teams to balance risk mitigation with business enablement, and helping establish security as an enabler rather than a blocker.