The Senior Identity Engineer will lead the design, integration, and automation of identity controls across MLB's workforce and customer platforms. This is a hands-on engineering role at the intersection of identity, software engineering, and security: building production-grade integrations and services across Okta, Auth0, federation, and access governance. Your work will protect employees, partners, and contractors while securing identity experiences used by millions of fans.

Responsibilities

• Design and maintain identity security controls across Okta and Auth0, including SSO, MFA, federation, lifecycle management, and policy-based access
• Engineer secure auth and authorization patterns across SaaS, cloud, internal, and consumer-facing applications
• Build and maintain production-grade integrations, automation, and internal tooling via APIs, events, and workflow orchestration
• Lead complex integrations using SAML, OAuth 2.0, OIDC, SCIM, and JWT-based architectures
• Automate joiner-mover-leaver processes, provisioning/deprovisioning, and entitlement management
• Define secure patterns for non-human identities, service accounts, and AI agent use cases
• Identify and remediate identity-related security risks and misconfigurations; serve as senior escalation point for complex identity incidents
• Integrate security into CI/CD pipelines and contribute to application and API security tooling
• Partner with Engineering, IT, Product, HR, and vendors to embed identity controls into system design
• Mentor engineers and contribute to standards, runbooks, and peer reviews

Qualifications & Skills

• Bachelor's or Master's in Computer Science, Software Engineering, or Cybersecurity
• 5+ years in identity engineering, security engineering, or software engineering
• Fluency in Python, Go, Java, or JavaScript. Familiarity with NIST SP 800-63A/B/C.
• Strong experience with Okta required (Workflows, Lifecycle Management, Universal Directory, Adaptive MFA, federation) Auth0 experience for customer identity use cases preferred.
• Solid understanding of OAuth 2.0, OIDC, SAML, SCIM, JWT, TLS, and applied cryptography
• Experience building production-quality code, REST API integrations, and identity lifecycle automation
• Experience with Active Directory/Entra ID, cloud platforms (AWS/Azure/GCP), and engineering tooling (Git, CI/CD, Terraform)
• Relevant certifications from recognized organizations such as (ISC)², GIAC (SANS), CompTIA, ISACA, Okta, Auth0, or cloud providers (AWS, Azure, GCP) are a strong plus

Salary Range: $140,000 - $175,000 (Base Salary) + Bonus

As a candidate for this position, your salary and related aspects of compensation will be contingent upon your work experience, education, skills, and any other factors MLB considers relevant to the hiring decision. In addition to your salary, MLB believes in providing a competitive compensation and benefits package for its employees.

Top MLB Perks & Benefits

• Competitive Benefits Package
• Company 401K Contribution
• Paid Time Off and Holidays
• Paid Parental Leave
• Access to Free Tickets to Baseball Games & MLB.TV
• Discounts at MLB Store | MLBShop.com
• Employee Assistance Programs (EAP)
• Onsite/Online Training & Development Programs
• Tuition Reimbursement
• Disability Benefits (short term and long term)
• Life and Accidental Death Insurance
• Pet Insurance