Sr. Solutions Engineer

ConductorOne is the modern identity governance platform that makes it possible to move beyond the limitations of legacy IGA and reduce the identity attack surface with confidence. Designed for flexibility, ConductorOne provides a broad range of direct connectors to integrate with cloud, infrastructure, on-prem, and homegrown tools. The platform’s Access Fabric brings together previously siloed access and permissions data from across a company’s environment. This provides real-time visibility and dynamic access controls that allow businesses to reduce identity risks, move to just-in-time access, automate access reviews, and manage the full identity lifecycle. The platform delivers intuitive user experiences that help teams get up and running faster, using powerful automation backed by AI to significantly improve productivity. ConductorOne is trusted by forward-thinking enterprises like DigitalOcean, Instacart, NFI, Ramp, and Zscaler.

ConductorOne is looking for a Sr. Solutions Engineer to help drive customer adoption and success by delivering technical expertise, guiding customers through evaluations, and architecting secure, scalable identity and access management solutions.

We are seeking people who enjoy solving complex technical challenges, working directly with customers to understand their needs, and collaborating with cross-functional teams to enhance our platform. If you're passionate about identity security, automation, and making access management seamless for enterprises, we'd love to hear from you.

• Serve as a trusted advisor to prospects and customers on identity governance, authentication, authorization, and access control strategies.

• Architect and deliver technical solutions spanning IGA, IAM, CIEM, and PAM, mapping business requirements into scalable identity architectures.

• Lead workshops, whiteboard sessions, and demos that showcase the business value of identity automation, access governance, and zero trust.

• Design and implement integration strategies across AWS, GCP, and Azure, with a strong understanding of native identity services, policies, and entitlement models.

• Nerd out on protocols and standards like SAML, OAuth 2.0, OIDC, SCIM, and FIDO2 — and explain them to both engineers and CISOs.

• Build, test, and troubleshoot custom integrations and workflows using APIs, SDKs, and Terraform/automation frameworks.

• Stay ahead of industry trends (IGA, CIEM, Just-in-Time access, Zero Trust, identity for machine/non-human accounts) and share thought leadership with internal teams and customers.
  

• 8+ years in a technical pre-sales, solutions engineering, or identity architect role, OR equivalent hands-on experience in IAM/IGA.

• Strong understanding of authentication and authorization frameworks, MFA, step-up auth, conditional access, least privilege, and Zero Trust.

• Practical knowledge of directory services (Okta, Azure AD/Entra ID, LDAP, Google Workspace, on-prem AD).

• Hands-on cloud experience with AWS IAM/IAM Identity Center, GCP IAM, and Azure AD/role-based access models, including how to govern them with IGA.

• Comfort with GO, APIs, SDKs, JSON/YAML, scripting, and automation, Terraform or similar IaC tools.

• Excellent communication skills, able to run deep technical conversations with engineers while articulating value to business stakeholders.

• Willingness to travel for customer meetings, partner events, or industry conferences.

• Industry-recognized certifications (CCSP, CISSP, AWS, Azure, GCP, etc.)

• Can draw an access review flow on a whiteboard in five seconds flat.

• Enjoy building custom connectors or automations for SaaS apps and cloud infra.

• Love translating arcane IAM errors into simple, actionable explanations for customers.
  

ConductorOne, Inc. is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, national origin or nationality, ancestry, age, disability, gender identity or expression, marital status, veteran status or any other category protected by law.