Distinguished Software Engineer - Identity

As a Distinguished Engineer at Capital One, you will be a part of a community of technical experts working to define the future of banking in the cloud.

The Mission: We are moving beyond the era of static, administrative-time access to a future defined by Adaptive, Policy-Based Orchestration. We aren't just migrating our core infrastructure from on-premise to the Cloud; we are fundamentally re-architecting how identity serves as the perimeter in a highly regulated environment.

Our goal is to abstract the complexity of legacy Identity Governance and Administration (IGA) and replace standing privileges with a Just-In-Time (JIT) ecosystem. We are looking for a visionary architect to build an intelligent, self-sufficient platform that evaluates real-time context—integrating endpoint risk, network signals, and behavioral heuristics—to grant the right access, to the right resources, at the exact moment it's needed.

• The Move to Just-In-Time (JIT): Architect the transition away from "permanent access" to a model of zero standing privileges. You will design the systems that enable seamless, automated access elevation and revocation based on real-time necessity.

• Policy-as-Code & Abstraction: Lead the effort to abstract IGA components, moving us toward a centralized, policy-based access model that is agnostic of the underlying stack and highly automated.

• Contextual & Adaptive Security: Design an authorization fabric that factors in multi-dimensional telemetry—including device posture, network risk, and user behavior—to make dynamic, risk-based access decisions.

• Engineering Self-Sufficiency: Champion an "Identity-as-a-Service" internal culture, building developer-centric APIs and self-service capabilities that allow our product teams to move fast without compromising our rigorous regulatory guardrails.

• Governance in a Regulated Landscape: Navigate the complexity of a highly regulated financial environment, ensuring that our leap into the future of IAM meets and exceeds the most stringent compliance and audit standards.

The Visionary We Need: You are a recognized leader in the Identity space who understands that the "Cloud Journey" is only the foundation. You have experience decoupling legacy monoliths, implementing Open Policy Agent (OPA) or similar policy engines, and building resilient, high-scale distributed systems. You don’t just "manage" identity; you treat Identity as the core engine of a modern Zero Trust architecture.

Distinguished Engineers are expected to lead through technical contribution. You will operate as a trusted advisor for our key technologies, platforms and capability domains, creating clear and concise communications, code samples, blog posts and other material to share knowledge both inside and outside the organization.

You will specialize in a particular subject area, but your input and impact will be sought and expected throughout the organization.

If you are ready to provide thought leadership and build engineering excellence across Capital One's engineering teams, come join us in our mission to change banking for good.

• Articulate and evangelize a bold technical vision for your domain

• Decompose complex problems into practical and operational solutions

• Serve as an authoritative expert on non-functional system characteristics, such as performance, scalability and operability

• Continue learning and injecting advanced technical knowledge into our community

• Handle several projects simultaneously, balancing your time to maximize impact

• Act as a role model and mentor within the tech community, helping to coach and strengthen the technical expertise and know-how of our engineering and product community

• At least 7 years of experience in Software engineering and solution architecture

• At least 7 years of experience in Enterprise architecture and design patterns

• Bachelor's or Master's Degree in Computer Science or a related field

• 10+ years of professional experience coding in commonly used languages (Java, Python, Go, JavaScript/TypeScript, Swift)

• 8+ years of professional experience in the full lifecycle of system development, from conception through architecture, implementation, testing, deployment and production support

• 3+ years of experience with public or private cloud technologies

Capital One will consider sponsoring a new qualified applicant for employment authorization for this position.

Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate’s offer letter.

Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the Capital One Careers website . Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level.

No agencies please. Capital One is an equal opportunity employer (EOE, including disability/vet) committed to non-discrimination in compliance with applicable federal, state, and local laws. Capital One promotes a drug-free workplace.

Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections 4901-4920; New York City’s Fair Chance Act; Philadelphia’s Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries.