Principal Digital Identity Engineer

The Nuclear Company is the fastest growing startup in the nuclear and energy space creating a never before seen fleet-scale approach to building nuclear reactors. Through its design-once, build-many approach and coalition building across communities, regulators, and financial stakeholders, The Nuclear Company is committed to delivering safe and reliable electricity at the lowest cost, while catalyzing the nuclear industry toward rapid development in America and globally.

Principal Digital Identity Engineer Position Overview

The Principal Digital Identity Engineer is a senior technical leadership role responsible for designing, implementing, and maintaining enterprise-level digital identity and access management systems. This position requires deep expertise in identity governance, authentication protocols, and security frameworks to ensure secure and seamless access to digital resources across the organization.

Key Responsibilities Technical Leadership & Architecture

- Design and architect enterprise-wide digital identity management solutions, including identity governance, access management, and authentication systems

- Lead the implementation of identity and access management (IAM) platforms, single sign-on (SSO), multi-factor authentication (MFA), and privileged access management (PAM) solutions

- Develop and maintain identity lifecycle management processes from provisioning to de-provisioning

- Establish standards for identity federation, directory services, and authentication protocols (SAML, OAuth, OpenID Connect, LDAP)

- Provide technical guidance on identity-related security controls and compliance requirements

Security & Compliance

- Ensure compliance with regulatory requirements and industry standards for identity management and data protection

- Implement security best practices for identity verification, authentication, and authorization

- Conduct security assessments and risk analysis for identity systems

- Develop policies and procedures for identity governance and administration

- Maintain cybersecurity awareness and integrate security principles into all identity solutions

Mentorship & Collaboration

- Provide expert technical guidance and mentorship to junior engineers and cross-functional teams

- Lead complex engineering projects involving identity integration across multiple systems and platforms

- Serve as technical reviewer and approver for identity-related designs and implementations

- Collaborate with cybersecurity, software engineering, and IT teams to ensure cohesive identity management strategies

- Represent the organization in client meetings and industry forums on identity management topics

Innovation & Continuous Improvement

- Champion adoption of modern identity management technologies and best practices

- Stay current with emerging trends in digital identity, including decentralized identity, biometrics, and zero-trust architectures

- Drive automation of identity processes to improve efficiency and reduce manual overhead

- Contribute to training program development for identity management practices

- Evaluate and recommend new identity technologies and vendor solutions

Required Qualifications

Education & Experience

- Bachelor's degree in Computer Science, Information Security, Engineering, or related field (Master's preferred) - 12+ years of experience in identity and access management, information security, or related fields - 5+ years in a senior or lead engineering role with demonstrated technical leadership

Technical Skills

- Expert knowledge of IAM platforms (e.g., Okta, Azure AD, Ping Identity, ForgeRock, SailPoint)

- Deep understanding of authentication protocols and standards (SAML, OAuth 2.0, OpenID Connect, LDAP, Kerberos)

- Proficiency in directory services (Active Directory, Azure AD, LDAP)

- Experience with privileged access management (PAM) and identity governance solutions

- Strong understanding of cryptography, PKI, and certificate management

- Knowledge of cloud identity services (AWS IAM, Azure AD, GCP Identity)

- Familiarity with identity APIs and integration patterns

- Experience with scripting and automation (Python, PowerShell, or similar)

Security & Compliance Knowledge

- Strong understanding of security frameworks (NIST, ISO 27001, CIS Controls)

- Knowledge of compliance requirements (GDPR, HIPAA, SOC 2, etc.)

- Experience with zero-trust security models and implementation

- Understanding of data privacy principles and personally identifiable information (PII) protection

Soft Skills

- Excellent communication skills with ability to explain complex technical concepts to non-technical stakeholders

- Strong leadership and mentoring capabilities

- Proven ability to manage multiple complex projects simultaneously

- Strategic thinking with focus on long-term architectural planning

- Problem-solving mindset with attention to detail

Preferred Qualifications

- Relevant certifications such as CISSP, CISM, CISA, or vendor-specific IAM certifications

- Experience in highly regulated industries (nuclear, healthcare, finance, government)

- Knowledge of emerging identity technologies (decentralized identity, blockchain-based identity, biometrics)

- Experience with DevSecOps practices and CI/CD pipelines

- Contributions to open-source identity projects or industry standards

Work Environment

- Collaborative team environment with cross-functional interaction

- May require occasional travel for client meetings or industry conferences

- Hybrid or remote work options may be available depending on organizational needs

This role is critical to ensuring secure, efficient, and compliant access to digital resources across the organization while maintaining the highest standards of security and user experience.

Benefits

- Competitive compensation packages

- 401k with company match

- Medical, dental, vision plans

- Generous vacation policy, plus holidays

Estimated Starting Salary Range

The estimated starting salary range for this role is $198,000 - $228,000 annually less applicable withholdings and deductions, paid on a bi-weekly basis. The actual salary offered may vary based on relevant factors as determined in the Company’s discretion, which may include experience, qualifications, tenure, skill set, availability of qualified candidates, geographic location, certifications held, and other criteria deemed pertinent to the particular role.

EEO Statement

The Nuclear Company is an equal opportunity employer committed to fostering an environment of inclusion in the workplace. We provide equal employment opportunities to all qualified applicants and employees without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other protected characteristic. We prohibit discrimination in all aspects of employment, including hiring, promotion, demotion, transfer, compensation, and termination.

Export Control

Certain positions at The Nuclear Company may involve access to information and technology subject to export controls under U.S. law. Compliance with these export controls may result in The Nuclear Company limiting its consideration of certain applicants.