Tuyển dụng Principal Identity Architect

Overview

As a Principal Identity Architect, you will lead Epsilon’s identity modernization—transitioning from legacy SAML and long-lived credentials to a modern, OAuth 2.1 / OpenID Connect (OIDC)-first model. You’ll design secure, scalable identity patterns across multi-cloud environments while enabling teams to build with speed and confidence.

You’ll partner closely with Security, Cloud, Platform, and Engineering teams to replace API keys and service accounts with scoped, ephemeral machine identities, establish enterprise standards, and deliver secure, developer-friendly integrations.

This is a hands-on leadership role for someone who can drive strategy, mentor engineers, and turn architecture into real-world implementations.

Responsibilities

What You’ll Acheive

Modern Identity Architecture

Lead adoption of OAuth 2.1 / OIDC; drive migration from SAML and legacy auth

Design secure token flows (Auth Code + PKCE, Client Credentials, delegated access)

Define standards for token usage, scopes, claims, and lifecycle management

Reduce risk from token leakage, replay, and over-permissioning

Machine & Non-Human Identity

Replace long-lived credentials with modern machine identity patterns

Design M2M authentication for APIs, data pipelines, and platform workloads

Partner with teams on service account migration and secrets reduction

Platform & Integration Engineering

Build reusable identity patterns across IdPs, API gateways, and cloud platforms

Enable secure, scalable access across AWS, Azure, and/or GCP

Troubleshoot complex auth issues in hybrid and multi-cloud environments

Security, Governance & Observability

Apply Zero Trust principles (least privilege, scoped access)

Improve identity logging, monitoring, and audit readiness

Establish governance for OAuth apps, scopes, and access policies

Leadership & Delivery

Drive identity modernization programs end-to-end

Mentor architects and engineers; set technical standards

Break down complex initiatives into actionable workstreams

Lead incident response and improve operational visibility

Qualifications

Who you Are

What you’ll Bring with you

Bachelors or Maseters in Computer Science or related field.

7+ years in IAM, security engineering, or platform roles

3+ years hands-on with OAuth 2.0 / OIDC in production

Strong expertise in token flows, scopes, claims, and secure design patterns

Experience implementing machine identity (M2M, workload identity, etc.)

Track record of modernizing identity (SAML → OIDC or similar)

Experience with AWS, Azure, or GCP identity services

Ability to lead initiatives, influence teams, and deliver at scale

How you’ll Stand out from other Talent

Experience with API security, data platforms, or service-to-service auth at scale

Familiarity with SPIFFE/SPIRE, OPA, or advanced authorization models

Experience with Okta, Entra ID (Azure AD), Auth0, or Ping

Exposure to AI/agent-based identity patterns

Scripting or automation (Python, Bash)

Click here to view how Epsilon transforms marketing with 1 View, 1 Vision, 1 Voice.

Additional Information

When You Join Us, We’ll Create Something EPIC Together

Epsilon is a global data, technology and services company that powers the marketing and advertising ecosystem. For decades, we’ve provided marketers from the world’s leading brands the data, technology and services they need to engage consumers with 1 View, 1 Vision and 1 Voice. 1 View of their universe of potential buyers. 1 Vision for engaging each individual. And 1 Voice to harmonize engagement across paid, owned and earned channels.

Epsilon’s comprehensive portfolio of capabilities across our suite of digital media, messaging and loyalty solutions bridge the divide between marketing and advertising technology. We process 400+ billion consumer actions each day using advanced AI and hold many patents of proprietary technology, including real-time modeling languages and consumer privacy advancements. Thanks to the work of every employee, Epsilon has been consistently recognized as industry-leading by Forrester, Adweek and the MRC. Epsilon is a global company with more than 9,000 employees around the world.

Our pillars aren't just words. They're how we show up every day.

People centricity

We focus on employee well-being in an environment where colleagues truly care about each other.

Collaboration

We work together, support one another, and collectively achieve goals.

Growth

There are endless opportunities for growth through learning, development and career advancement.

Innovation

We drive progress through cutting-edge solutions and forward-thinking approaches.

Flexibility

• We’ve created a balance between work and personal life, and we encourage adaptability to solve problems creatively.
• Our values guide us to create value for our clients, our people and consumers.
• Act with integrity
• Work together to win together
• Innovate with purpose
• Respect all voices
• Empower with accountability
• These pillars and values are our foundation—shaping our culture, guiding our decisions, and uniting us in common purpose.
• Because You Matter
• As an Epsilon employee, you deserve perks and benefits that put you, your family and your finances first.  Our benefits encompass a wide range of offerings, including but not limited to the following:
• Time to Recharge: Flexible time off (FTO), 15 paid holidays
• Time to Recover: Paid sick time
• Family Well-Being: Parental/new child leave, childcare & elder care assistance, adoption assistance
• Extra Perks: Comprehensive health coverage, 401(k), tuition assistance, commuter benefits, professional development, employee recognition, charitable donation matching, health coaching and counseling
• Epsilon benefits are subject to eligibility requirements and other terms.
• Epsilon is an Equal Opportunity Employer.
• Epsilon’s policy is not to discriminate against any applicant or employee based on actual or perceived race, age, sex or gender (including pregnancy), marital status, national origin, ancestry, citizenship status, mental or physical disability, religion, creed, color, sexual orientation, gender identity or expression (including transgender status), veteran status, genetic information, or any other characteristic protected by applicable federal, state or local law. Epsilon also prohibits harassment of applicants and employees based on any of these protected categories. Epsilon will provide accommodations to applicants needing accommodations to complete the application process. Please reach out to LeaveofAbsence@epsilon.com to request an accommodation.

For San Francisco Bay and Los Angeles Areas

• Epsilon will consider for employment qualified applicants with criminal histories in a manner consistent with the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance and San Francisco Police Code Sections 4901-4919, commonly referred to as the San Francisco Fair Chance Ordinance. Applicants with criminal histories are welcome to apply.
• #LI-TG1
• &nbsp
• Compensation Range: USD $127,900.00 - USD $237,500.00/Annually. This is the pay range the Company believes it will pay for this position at the time of this posting. Consistent with applicable law, compensation will be determined based on the skills, qualifications, and experience of the applicant along with the requirements of the position, and the Company reserves the right to modify this pay range at any time. Temporary roles may be eligible to participate in our freelancer/temporary employee medical plan through a third-party benefits administration system once certain criteria have been met. Temporary roles may also qualify for participation in our 401(k) plan after eligibility criteria have been met. For regular roles, the Company will offer medical coverage, dental, vision, disability, 401k, and paid time off. The Company anticipates the application deadline for this job posting will be 9/4/2026.