Distinguished Software Engineer - Identity

Capital One Capital One · Banking · McLean, VA +2

This role focuses on re-architecting identity and access management (IAM) systems in a highly regulated financial environment, moving towards a policy-based, Just-In-Time (JIT) access model. The goal is to build an intelligent, self-sufficient platform that uses real-time context to grant access, abstracting legacy IGA components and enabling developer self-sufficiency while adhering to strict regulatory guardrails. The role involves technical leadership, architectural design, and contributing to a community of technical experts.

What you'd actually do

  1. The Move to Just-In-Time (JIT): Architect the transition away from "permanent access" to a model of zero standing privileges. You will design the systems that enable seamless, automated access elevation and revocation based on real-time necessity.
  2. Policy-as-Code & Abstraction: Lead the effort to abstract IGA components, moving us toward a centralized, policy-based access model that is agnostic of the underlying stack and highly automated.
  3. Contextual & Adaptive Security: Design an authorization fabric that factors in multi-dimensional telemetry—including device posture, network risk, and user behavior—to make dynamic, risk-based access decisions.
  4. Engineering Self-Sufficiency: Champion an "Identity-as-a-Service" internal culture, building developer-centric APIs and self-service capabilities that allow our product teams to move fast without compromising our rigorous regulatory guardrails.
  5. Governance in a Regulated Landscape: Navigate the complexity of a highly regulated financial environment, ensuring that our leap into the future of IAM meets and exceeds the most stringent compliance and audit standards.

Skills

Required

  • Software engineering
  • Solution architecture
  • Enterprise architecture
  • Design patterns
  • Identity and Access Management (IAM)
  • Open Policy Agent (OPA) or similar policy engines
  • Building resilient, high-scale distributed systems
  • Zero Trust architecture

Nice to have

  • Computer Science or related field degree
  • Java, Python, Go, JavaScript/TypeScript, Swift
  • Full lifecycle of system development
  • Public or private cloud technologies
  • Modernizing legacy systems
  • AI coding tools

What the JD emphasized

  • highly regulated environment
  • Just-In-Time (JIT)
  • Policy-as-Code
  • rigorous regulatory guardrails
  • highly regulated financial environment
  • Identity Governance and Administration (IGA)