Job brief: Senior Security Engineer, Identity

Ramp · New York, NY (HQ) · facts as of 2026-11-10. Anyone can open this page; no account needed.

Is it still open? · Checked by JoRoute

Still listed. JoRoute saw it on Ramp's own job board 11 hours ago; the employer first posted it on 2026-11-06.

What JoRoute checked · Checked by JoRoute

  • Listed on Ramp's own job board. JoRoute does not take listings from job ads or recruiters.
  • First seen by JoRoute 2026-11-07 (3 days ago); last confirmed on the board 2026-11-10.
  • The apply link opens jobs.ashbyhq.com, the address Ramp's board gives for this job.
  • No other listing with this title and place on this board in the last 90 days.
  • No layoff notices (WARN) under this name in the state files JoRoute reads.

What the listing says · Employer's own words, not checked

  • Pay: $175,200 to $240,900 a year
  • Job type: Full-time
  • Where: Remote · New York, NY (HQ)
  • Posted: 2026-11-06

What the job asks · Employer's own words, not checked

Level: Senior. The title says "Senior".

Must have

  • 6+ years in identity engineering or IAM, including operational ownership of Okta or an equivalent identity provider at scale

Conditions

  • You will design how identity works at Ramp and write the code that implements it: identity configuration in Terraform, entitlements created and governed through an agentic workflo…
  • Build the identity data lake behind an on-call agent that can explain events like a User Not Assigned Application error in Okta before the employee opens a ticket
  • Budget for intra-office travel
  • In-office perks: lunch, snacks, drinks, and more

Main duties

  • Own Terraform for identity services: Okta applications, authorization servers, authentication policies, groups and group rules, and SCIM provisioning
  • Design and operate custom authorization servers, including audiences, scopes, claims, and access policies for internal services and AI agents
  • Implement app-to-app and agent access through Cross App Access (XAA) and ID-JAG, so delegated access is brokered and governed by the IdP rather than granted …
  • Own our IGA platform: the entitlement catalog, ownership, access requests, time-bound grants, and certifications
  • Build the agentic workflow that takes a team from "I have a new group of people who need access to X" to a defined, owned, and governed entitlement, with the…

Lines copied from the posting, not rewritten. "Preferred" or "nice to have" items are not listed as must-haves.

How it compares · Compared by JoRoute from listings

  • Typical listed pay for engineer jobs in New York, NY: $209k a year (370 listings, 34 employers). This listing pays about the same.
  • Across Ramp's 29 open listings, 0% of those with a posting date were first posted more than 60 days ago. How Ramp hires

What nobody outside the employer knows · Not known

  • Whether the role is already filled or on hold: employers often leave listings up.
  • How many people applied, and who reads the applications.
  • Where in the published range an offer would land.

Ask before you apply

  1. Is the role fully remote, and from which states can I work?
  2. What are the interview steps, and when should I expect to hear back?

Share this brief

Send it to someone whose opinion you trust. They can open it without an account, and nothing about you is in the link.

Email itText it

To keep a copy, use your browser's Print or Share button.

Next steps

Apply on the employer's page Full listingDoes my CV fit?Practise the interviewShould I apply?

Got a message about this job asking for money or documents? Check the message first.

Keep looking

A summary of facts and listings, not a verdict that this job or employer is safe. JoRoute is not affiliated with Ramp. How JoRoute checks listings · Original posting