Application Security Engineer, VDC
Job Summary
Job Description
Veeam is seeking an Application Security Engineer to join their growing team, supporting a cloud-native SaaS platform built on Microsoft Azure. This role focuses on building and maturing the identity and access management (IAM) strategy across Azure multi-tenant applications. Key responsibilities include designing and securing authentication/authorization flows, driving secure identity patterns, integrating Azure Entra ID, implementing RBAC, conducting threat modeling, and collaborating with engineering teams to harden identity surfaces.
Must have:
- Designing and securing authentication and authorization flows across Azure multi-tenant enterprise applications
- Driving adoption of secure identity patterns, including OAuth2, OpenID Connect, and SAML
- Integrating and securing Azure Entra ID (formerly Azure AD), including App Registrations, App Roles, consent frameworks, and Graph API
- Implementing and refining Role-Based Access Control (RBAC), Just-in-Time access (PIM), and conditional access policies
- Conducting threat modeling and security reviews for IAM architecture and features
- Collaborating with engineering and platform teams to harden identity surfaces and enforce least privilege access
- Contributing to access management audit support for compliance frameworks such as FedRAMP, SOC 2, and ISO 27001
- 3+ years of experience in Application Security, Identity Engineering, or Cloud Security with a focus on IAM
- Demonstrated hands-on experience with Azure Entra ID, including multi-tenant SaaS identity integrations
- Strong understanding of modern identity standards: OAuth2, OIDC, SAML, SCIM
- Familiarity with Microsoft Graph API, App Permissions, and Azure RBAC models
- Experience designing and securing Azure PaaS applications
- Proven ability to support engineering and SRE teams with secure identity practices
- Experience working in CI/CD environments with integrated security tooling
- Fluent English, with the ability to collaborate with globally distributed teams
Good to have:
- Experience leading or supporting SaaS compliance programs (FedRAMP, SOC 2, ISO 27001)
- Familiarity with threat modeling methodologies (STRIDE, LINDDUN)
- Experience with C#/.NET/GO and securing authentication flows in application code
- Working knowledge of AWS identity services (IAM, Cognito, STS)
- Understanding of cryptography in application contexts (certificates, token signing, etc.)
Perks:
- Unlimited PTO
- 3 global VeeaMe Days per year: company-wide closures for employees to take a break, disconnect, and focus on self-care
- Paid Holidays
- Veeam Care Days: 24 hours paid time for volunteering
- Medical, dental, and vision coverage starting on day one (multiple plan options)
- Flexible Spending Accounts (FSA) and Health Savings Account (HSA) options
- Employer HSA contributions (for HDHP participants)
- Life and AD&D insurance (employee, spouse/partner, and child options)
- Company-paid short-term and long-term disability insurance
- Supplemental individual disability insurance (IDI)
- Family planning support: fertility, adoption, surrogacy, and parental resources
- Paid parental leave
- Employee Assistance Program
- Additional voluntary benefits: accident, critical illness, hospital indemnity, legal, identity theft protection, commuter benefits, pet care
- Mental health support
- 401(k) plan
- Professional training and education, on-demand learning libraries (LinkedIn Learning, O’Reilly), mentoring, workshops, and Global Day of Learning
16 skills required
Job Details
Veeam, the #1 global market leader in data resilience, believes businesses should control all their data whenever and wherever they need it. Veeam provides data resilience through data backup, data recovery, data portability, data security, and data intelligence. Based in Seattle, Veeam protects over 550,000 customers worldwide who trust Veeam to keep their businesses running. Join us as we move forward together, growing, learning, and making a real impact for some of the world’s biggest brands. The future of data resilience is here - go fearlessly forward with us.
We are looking for an Application Security Engineer to join our growing team of experts supporting our cloud-native SaaS platform. The SaaS solutions we develop and offer to our customers are built on Microsoft Azure, delivering secure, scalable, and enterprise-grade data protection services. This role will focus on building and maturing our identity and access management (IAM) strategy across our Azure multi-tenant applications.
Your tasks will include:
- Designing and securing authentication and authorization flows across Azure multi-tenant enterprise applications
- Driving adoption of secure identity patterns, including OAuth2, OpenID Connect, and SAML
- Integrating and securing Azure Entra ID (formerly Azure AD), including App Registrations, App Roles, consent frameworks, and Graph API
- Implementing and refining Role-Based Access Control (RBAC), Just-in-Time access (PIM), and conditional access policies
- Conducting threat modeling and security reviews for IAM architecture and features
- Collaborating with engineering and platform teams to harden identity surfaces and enforce least privilege access
- Contributing to access management audit support for compliance frameworks such as FedRAMP, SOC 2, and ISO 27001
Technologies we work with:
- Azure Entra ID, Microsoft Graph API, Azure App Registrations, API Management
- Azure Functions, Cosmos DB, Azure Storage, Static Web Apps
- Atlassian Suite, Azure DevOps, GitHub
- IaC tools: Terraform, Azure ARM templates
- CI/CD: Azure DevOps Pipelines, GitHub Actions
- Observability: Azure Monitor, AppInsights, Elastic Cloud (ELK)
What we expect from you:
- 3+ years of experience in Application Security, Identity Engineering, or Cloud Security with a focus on IAM
- Demonstrated hands-on experience with Azure Entra ID, including multi-tenant SaaS identity integrations
- Strong understanding of modern identity standards: OAuth2, OIDC, SAML, SCIM
- Familiarity with Microsoft Graph API, App Permissions, and Azure RBAC models
- Experience designing and securing Azure PaaS applications
- Proven ability to support engineering and SRE teams with secure identity practices
- Experience working in CI/CD environments with integrated security tooling
- Fluent English, with the ability to collaborate with globally distributed teams
Will be an advantage:
- Experience leading or supporting SaaS compliance programs (FedRAMP, SOC 2, ISO 27001)
- Familiarity with threat modeling methodologies (STRIDE, LINDDUN)
- Experience with C#/.NET/GO and securing authentication flows in application code
- Working knowledge of AWS identity services (IAM, Cognito, STS) a plus
- Understanding of cryptography in application contexts (certificates, token signing, etc.)
Similar Jobs
Looks like we're out of matches
Set up an alert and we'll send you similar jobs the moment they appear!
Similar Skill Jobs
Looks like we're out of matches
Set up an alert and we'll send you similar jobs the moment they appear!
Jobs in California, United States
Looks like we're out of matches
Set up an alert and we'll send you similar jobs the moment they appear!
Cyber Security Jobs
Looks like we're out of matches
Set up an alert and we'll send you similar jobs the moment they appear!
About The Company
Veeam’s got your workloads covered — cloud, on‑prem, remote sites, and everything else in between. Our Zero Trust principles are baked into every backup, ensuring your data is protected and ready for recovery. Wherever your data lives, Veeam works with that, too.
Get notified when new jobs are added by Veeam Software
