Staff Security Engineer, IAM

🕒 il y a 12 jours

🏄 California – Distant

🏄 California – Remote

💵 $168 000 - $238 000 / an

⏰ Temps Plein

🔴 Expert

👮‍♂️ Cybersécurité / Ingénieur Sécurité

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Recevoir des emails pour des emplois à distance

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

GitLab

Site WebLinkedInTous les Emplois

1001 - 5000 employés

Fondée en 2014

🤖 Intelligence artificielle

🏢 Entreprise

☁️ SaaS

💰 Secondary Market en 2020-11

Artificial Intelligence • Enterprise • SaaS

GitLab est une plateforme DevOps complète, proposée sous la forme d’une application unique, qui change en profondeur la manière dont les équipes Développement, Sécurité et Ops collaborent et construisent des logiciels. De l’idée à la production, GitLab aide les équipes à réduire le temps de cycle de plusieurs semaines à quelques minutes, à diminuer les coûts de développement et le time to market, tout en augmentant la productivité des développeurs.

Description

• Design comprehensive identity and AI access solutions that scale with our business growth, from AI agent governance frameworks to privileged access workflows that eliminate standing access through just-in-time provisioning • Lead identity and access engineering for our enterprise AI platforms including administration, SSO and SCIM integration, audit logging, data controls, and policy enforcement for Claude (web, Claude Code, Cowork) and adjacent tools • Codify our identity platforms in Terraform, leading the migration of Okta, Lumos, and our NHI platform from click-ops to peer-reviewed infrastructure-as-code, with a focus on global critical policies • Refactor our authentication framework to implement advanced conditional access controls such as device trust, location-based policies, risk-based step-up authentication, and behavioral analytics across our entire SaaS ecosystem • Pioneer non-human identity governance by designing monitoring and management solutions for service accounts, API keys, certificates, AI agents, and MCP integrations, and leading deployment, integration, and operationalization of our NHI platform across the SaaS estate • Drive cross-functional initiatives with Security, IT, Engineering, Enterprise AI, and the Office of the CIO to extract requirements from ambiguous business needs and translate them into actionable technical specifications • Mentor senior and intermediate engineers on technical implementation and strategic thinking, helping them develop expertise in modern identity and AI security practices

🎯 Exigences

• 8+ years of IAM experience designing and implementing enterprise-scale solutions, with demonstrated time at a Staff or senior IC level • Expert-level Okta expertise including Identity Engine, advanced authentication policies, lifecycle workflows, and API automation • Strong infrastructure-as-code practice with Terraform, including provider experience for SaaS identity platforms and a track record of migrating click-ops to code • Hands-on experience administering or governing enterprise AI platforms (Anthropic Claude preferred; OpenAI ChatGPT Enterprise, Google Gemini Enterprise, or similar acceptable), and awareness of AI-specific risks including prompt injection, MCP attack surface, agent identity, and data leakage • Strong automation experience using Python and iPaaS tools (Tines, Okta Workflows) • Experience with IGA platforms like Lumos, ConductorOne, or similar • Working knowledge of non-human identity tooling (Token Security, Oasis, Astrix, or similar), or equivalent experience governing service accounts, OAuth grants, and workload identities • Experience in regulated environments with knowledge of compliance frameworks (FedRAMP, SOC2, SOX), including change management, evidence collection, and audit support • Collaborative mindset and strategic communication skills for writing technical proposals, leading cross-functional initiatives, and mentoring teammates • Nice to have Qualifications: Passion for emerging identity challenges including AI agent governance, non-human identity management, zero-trust architecture, and behavioral analytics; Active user of Claude Code, Cursor, or similar agentic development tools, with intuition for how engineers integrate them into daily workflows.

🏖️ Avantages

• Benefits to support your health, finances, and well-being • Flexible Paid Time Off • Team Member Resource Groups • Equity Compensation & Employee Stock Purchase Plan • Growth and Development Fund • Parental Leave