Sr Security Engineer


This is a unique and exciting time to join Express. Since launching our EXPRESSway Forward strategy in 2020, we have been steadily advancing a transformation from being known as a store in the mall to a brand with a purpose, powered by a styling community. We believe that clothes can serve a higher purpose to make people look the way they want to look and feel the way they want to feel, and our Express brand purpose - We Create Confidence & Inspire Self-Expression - speaks to the role our brand can play in their lives. In 2021, we introduced our innovative Community Commerce program, inviting brand fans and style enthusiasts to take their passion for fashion to the next level by working with us.

Today, we are building, activating and amplifying the Express styling community, and we invite you to join us. Our culture is defined by three values - Express Yourself, Express Together, Express Success - and every associate at every level in every department is an important part of our transformation and our future.

For more information about Express, Inc. please visit


We are looking for an IAM Engineering Specialist to lead our enterprise-wide identity governance and access management program. The ideal candidate will drive the strategy, engineering, and implementation for the entire IAM lifecycle. The candidate will have opportunities to create processes for user authentication, SSO, application integration, access provisioning/deprovisioning, and other relevant IAM/PAM initiatives. This position can be a remote opportunity with occasional travel to headquarters as needed. Competitive candidates will have significant experience leading IAM deployment and maintenance efforts. This is a key initiative for our Cybersecurity Department and this role will afford significant opportunities guide and shape the IAM program.


• Lead the design and implementation of identity governance and privileged access management company-wide
• Configure and manage the IAM instance
• Implement Role Based Access Controls (RBAC), including role/entitlement analysis
• Responsible for requirements gathering, project management and delivery of Identity Platforms
• Troubleshoot user authentication/authorization issues.
• Integrate Third Party Vendors into IAM/SSO platform
• Own the migration of applications and users to new IAM/SSO platform
• Audit and review account accesses to enforce principle of least privilege


• 8+ years experience implementing and/or supporting enterprise IAM solutions, specifically with Okta
• Expertise with industry IAM concepts and best practices, particularly relating to SSO, MFA, IGA, and PAM
• In-depth knowledge of SSO, authentication and authorization technologies
• Experience deploying IAM technologies to cloud providers
• Proficiency in identity platforms like Okta, Ping Identity, including custom development
• Specific IAM certificates desired (e.g. CIGE, CIAM, CIMP, CAMS)


• Possesses and demonstrates curiosity
• Ability to proactively identify opportunities for process and efficiency improvements
• Demonstrates excellent communication skills to both technical and non-technical personnel
• Ability to clearly articulate and drive alignment across multiple teams and departments
• Ability to create and describe project estimations with assumptions and risks
• Ability to work in a fast-paced environment while managing multiple responsibilities
• Executes with limited to no supervision; self-motivated and self-directed


As an equal opportunity employer, Express does not discriminate in hiring or terms and conditions of employment on the basis of any federal, state, or locally protected class. Express only hires individuals authorized for employment in the United States.

Notification to Agencies: Please note that Express does not accept unsolicited resumes or calls from third-party recruiters or employment agencies. In the absence of a signed Master Service Agreement and approval from HR to submit resumes for a specific requisition, Express will not consider or approve payment to any third-parties for hires made.