Staff Security Engineer

Responsibilities

• Create an identity engine that powers the whole company and enhances our security program.
• Develop applications that enable and enforce our identity framework across the company.
• Build integrations that unify identities across various Identity Providers (IdPs), cloud providers, SaaS tools, and internal systems.
• Automate identity lifecycle operations, including provisioning, access reviews, and offboarding.
• Collaborate with other IAM engineers and partner teams to define architecture and ship iteratively.

Requirements

• Strong programming ability in one or more general-purpose languages (e.g., Go, Rust).
• Experience with one or more infrastructure-as-code languages (e.g., Terraform, AWS CDK) in a production capacity.
• Experience with identity protocols (SAML, OIDC, SCIM, OAuth) or identity providers (Okta, Azure AD, etc.).
• Proven ability to translate system design requirements into clean, maintainable implementations.
• Experience leading or contributing to architecture and design reviews.
• Ability to work autonomously, take ownership of projects, and collaborate across teams.
• Eligible to obtain and maintain a U.S. TS clearance.
• Experience working in environments with complex identity or access issues, including troubleshooting across distributed systems is preferred.
• Familiarity with RBAC, ABAC, or policy-as-code frameworks (e.g., OPA, Cedar) - preferred.
• Experience building bespoke solutions in high-growth and high-complexity environments is preferred.
• Experience with AWS, Azure, or GCP ecosystems and tooling is highly preferred.