Iam Security Engineer Jobs

We believe that the way people interact with their finances will drastically improve in the next few years. We’re dedicated to empowering this transformation by building the tools and experiences that thousands of developers use to create their own products. Plaid powers the tools millions of people rely on to live a healthier financial life. We work with thousands of companies like Venmo, SoFi, several of the Fortune 500, and many of the largest banks to make it easy for people to connect their financial accounts to the apps and services they want to use. Plaid’s network covers 12,000 financial institutions across the US, Canada, UK and Europe. Founded in 2013, the company is headquartered in San Francisco with offices in New York, Washington D.C., London and Amsterdam. Security Engineering is the engineering function inside the Plaid security org that focuses on developing the industry-leading security systems and infrastructure. Security Engineering owns most of Plaid’s security-related infrastructure: secure data storage, key management systems, internal identity platform, internal authentication systems, internal permission management, and internal authorization service. We develop solutions across data encryption, key management, access control, and data loss prevention to protect sensitive consumer data. We believe in the Zero Trust security model and are always looking for ways to improve our authentication and access control platforms. About the role: You will develop security capabilities to secure Plaid infrastructure and sensitive data access. You will lead the team’s strategic planning in collaboration with the manager and other senior engineers. You will own, maintain, and build Plaid’s security infrastructure and services like IAM Gateway, Key Management System and Network Firewall. You will consult with product engineers to ensure Plaid services meet security standards. You will help educate and support other engineering teams to improve security in

Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect with friends in 3D immersive digital experiences– all created by our global community of developers and creators. At Roblox, we’re building the tools and platform that empower our community to bring any experience that they can imagine to life. Our vision is to reimagine the way people come together, from anywhere in the world, and on any device. We’re on a mission to connect a billion people with optimism and civility, and looking for amazing talent to help us get there. A career at Roblox means you’ll be working to shape the future of human interaction, solving unique technical challenges at scale, and helping to create safer, more civil shared experiences for everyone. As a Senior Enterprise Security Engineer, you will play a critical role in executing Roblox’s Enterprise Security Strategy. You will design, deploy, and manage security solutions to protect Roblox’s corporate infrastructure and ensure secure, compliant operations across the organization. Working closely with Corporate Engineering and Trust & Safety teams, you will translate business requirements into robust security implementations that enable secure productivity while mitigating risk. You will be reporting directly to the Senior Manager of Enterprise Security Engineering. You'll partner with security professionals across the Information Security organization, and work cross-functionally with teams throughout Roblox to drive security initiatives that scale with our business. You will: Evaluate and implement security technologies and vendor solutions to ensure alignment with enterprise security requirements, compliance standards, and overall risk management strategy Lead and drive initiatives across core security domains, including Endpoint Security, SaaS Security, Identity & Access Management (IAM), Agentic AI Governance, and Supply Chain Security. Collaborate closely with IT, engin

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. We are looking for a Software Engineer II to join the Auth0 Security Engineering organization. You'll help build and maintain the security guardrails for our multi-cloud environment, implementing security and compliance standards as programmatic, code-driven policies. What You Will Do Cloud Security Controls: Implement and maintain organization-wide controls (SCPs, Azure Policy) balancing protection with developer experience. Identity & Access Management (IAM): Build and update templates and permission boundaries that govern how services and humans interact with our cloud, applying the principle of least privilege. Infrastructure & Network Security: Contribute to the security standards for VPC architecture, edge networking, and cross-account connectivity. System Design: Help build systems and processes that validate the security posture of the platform, enforcing our security policies and surfacing actionable feedback for engineering teams. Growth & Collaboration: Partner with teammates across the organization, share what you learn, and continually deepen your security expertise. What You Bring Cloud & Infrastructure Experience: 3+ years of experience in software engineering or information security, with hands-on exposure to cloud-native environments, Kubernetes (EKS, AKS), and cloud security concepts. Policy & Automation: Experience building or maintaining automated controls and infrastructure-as-code, ideally within Terraform workflows

Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect with friends in 3D immersive digital experiences– all created by our global community of developers and creators. At Roblox, we’re building the tools and platform that empower our community to bring any experience that they can imagine to life. Our vision is to reimagine the way people come together, from anywhere in the world, and on any device. We’re on a mission to connect a billion people with optimism and civility, and looking for amazing talent to help us get there. A career at Roblox means you’ll be working to shape the future of human interaction, solving unique technical challenges at scale, and helping to create safer, more civil shared experiences for everyone. As a Principal Enterprise Security Engineer, you will play a critical role in executing Roblox’s Enterprise Security Strategy. You will design, deploy, and manage security solutions to protect Roblox’s corporate infrastructure and ensure secure, compliant operations across the organization. Working closely with Corporate Engineering and Trust & Safety teams, you will translate business requirements into robust security implementations that enable secure productivity while mitigating risk. You will join the Platform, Enterprise, and Application Security group, reporting directly to the Senior Manager of Enterprise Security Engineering. You'll partner with security professionals across the Information Security organization, and work cross-functionally with teams throughout Roblox to drive security initiatives that scale with our business. You will: Evaluate and implement security technologies and vendor solutions to ensure alignment with enterprise security requirements, compliance standards, and overall risk management strategy Lead and drive initiatives across core security domains, including Endpoint Security, SaaS Security, Identity & Access Management (IAM), Agentic AI Governance

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the Role We are seeking a mid-level Infrastructure Vulnerability Management Engineer with a strong background in Cloud Security, DevSecOps, and Infrastructure-as-Code (IaC). In this role, you will bridge the gap between security, compliance, DevOps, and Platform engineering teams. You will identify infrastructure misconfigurations, secure multi-cloud environments, and manage continuous vulnerability lifecycles across cloud workloads, containers, and data repositories to satisfy strict regulatory compliance frameworks. You will also serve as a technical infrastructure responder during security incidents, deploying real-time cloud or network countermeasures to protect our production ecosystem. What You'll Do Core Responsibilities Infrastructure Scanning & Triage: Perform continuous security scanning across our cloud posture and workloads. Review, validate, and prioritize flaws and misconfigurations based on CVSS scores, real-world exploitability, and infrastructure network exposure. Posture Management & Visibility : Own and optimize Cloud Security Posture Management (CSPM), Kubernetes Security Posture Management (KSPM), and Data Security Posture Management (DSPM) tools to ensure uniform compliance, prevent data leakage, and maintain hardened baselines. Infrastructure-as-Code (IaC) Security: Configure, tune, and embed automated IaC security scanning tools into CI/CD pipelines to identify architectural risks (e.g., overly permissive IAM, public S3 buckets/Cloud Storage) before they are deployed to production. Workload & Container Security: Manage the continuous vulnerability scanning lifecycle for container images, registries, and Virtual Machines (VMs), partnering with SRE and Platform teams to build aut

ABOUT BASETEN Baseten powers mission-critical inference for the world's most dynamic AI companies, like Cursor, Notion, OpenEvidence, Abridge, Clay, Gamma, and Writer. By uniting applied AI research, flexible infrastructure, and seamless developer tooling, we enable companies operating at the frontier of AI to bring cutting-edge models into production. We're growing quickly and recently raised our $1.5B Series F , led by Altimeter Capital, Conviction Partners, and Spark Capital. Join us and help build the platform engineers turn to ship AI products. THE ROLE We are seeking an experienced and proactive Security Engineer to help us build, maintain, and continuously improve the security posture of our rapidly growing ML infrastructure platform. As one of the first dedicated security hires at Baseten, you will work cross-functionally with engineering and operations teams to ensure we’re meeting the highest standards of confidentiality, integrity, and availability. You’ll have an opportunity to shape our security strategy and best practices from the ground up, influencing the way our platform handles sensitive data for both internal and external stakeholders. RESPONSIBILITIES Security architecture and design: Collaborate with engineering teams to design and implement secure systems and infrastructure, including cloud (AWS/GCP) environments and container orchestration platforms. Vulnerability management: Lead proactive vulnerability assessments, pen tests, and remediation efforts to ensure our products and infrastructure remain secure. Incident response: Develop and maintain incident response processes, including detection, analysis, containment, eradication, and post-incident reviews. Identity and access management (IAM): Oversee IAM strategies and tools to ensure the right people have the right level of access to our systems and data. Security compliance and audits: Work closely with operations to ensure compliance with relevant standards (e.g., SOC 2, ISO 27001) and as

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the Team The Security Engineering team protects Anthropic's AI systems and maintains the trust of our users and society. We define the authentication architecture for our training infrastructure, design the cryptographic foundations that protect model weights and training data, and drive the developer security program that shapes how engineers build and ship software. The team works across several areas that collaborate closely: identity and secrets management, developer security and supply chain, infrastructure security, and secure frameworks. You will support one of these areas while contributing across others, with your focus shaped by your strengths and the team's priorities. Responsibilities: Build and maintain identity and secrets management systems, including credential issuance, rotation, and workload authentication across our multi-cloud environments Contribute to cluster security controls including RBAC policies, namespace isolation, workload identity, and pod security Implement and maintain cloud security controls including IAM, network segmentation, VPC architecture, and encryption across our multi-cloud and on-prem environments Design and implement secure development frameworks and libraries that make secure coding the path of least resistance for our engineering teams, including service to service authentication, serialization libraries, and tool proxies. Harden CI/CD pipelines against supply chain attacks through isolated build environments, signed attestations, dependency verification, and automated policy enforcement Identify and remediate security gaps through code review, threat modeling, and hands-on debuggin

About Flexport: At Flexport, we believe global trade can move the human race forward. That’s why it’s our mission to make global commerce so easy there will be more of it. We’re shaping the future of a $10T industry with solutions powered by innovative technology and exceptional people. Today, companies of all sizes—from emerging brands to Fortune 500s—use Flexport technology to move more than $19B of merchandise across 112 countries a year. The recent global supply chain crisis has put Flexport center stage as we continue to play a pivotal role in how goods move around the world. We are proud to have the support of the best investors in the game who believe in our mission, solutions and people. Ready to tackle global challenges that impact business, society, and the environment? Come join us. All security disciplines work under the umbrella of the combined PSI (Platform, Security & Infrastructure) team: we build the paved path and tooling that hundreds of engineers around the world rely on every day to ship. This is not a compliance or certification role. You won't be measured on audit portfolios. You'll be measured on the guardrails you build and whether engineering teams reach for them by default. A misconfigured IAM boundary here doesn't just degrade a dashboard: it can stall a customs filing or strand a container. Flexport also runs a genuinely heterogeneous estate: hundreds of services, carrier and customs integrations, and infrastructure spanning three continents, which makes multi-account architecture and cross-border data handling real problems rather than exam questions. What You'll Do Architecture & guardrails Design and review cloud security architecture for AWS and Kubernetes: account structure, network segmentation, workload identity, and secure-by-default patterns for new services. Fix the Terraform module, not the finding — drive remediation-at-source so misconfigurations get closed at the pattern level, not one ticket at a time.

Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect with friends in 3D immersive digital experiences– all created by our global community of developers and creators. At Roblox, we’re building the tools and platform that empower our community to bring any experience that they can imagine to life. Our vision is to reimagine the way people come together, from anywhere in the world, and on any device. We’re on a mission to connect a billion people with optimism and civility, and looking for amazing talent to help us get there. A career at Roblox means you’ll be working to shape the future of human interaction, solving unique technical challenges at scale, and helping to create safer, more civil shared experiences for everyone. As the Engineering Manager for Enterprise Security, you will be hands-on with the design, implementation, and strategy of the systems protecting Roblox's corporate infrastructure: endpoint security, network security, and supply chain security. You will build and lead the team that writes and runs this software, and partner across the company to help Roblox balance innovation with security risk management. You will be part of the Enterprise Security team, reporting to the Senior Manager of Enterprise Security and IAM, and will work closely with security leaders across InfoSec and cross-functionally with Corporate Engineering, DevOps, IT, and Product teams. This role is based in San Mateo with a hybrid schedule. You will: Lead and grow the team: Hire, coach, and develop a team of security software engineers. Own performance, career growth, and the technical culture of the team. Own the Enterprise Security roadmap: Define and drive strategy across the team's domains, balancing near-term risk reduction with durable platform investment. Security for AI, and AI for security: Set direction for how AI is deployed safely at Roblox: agent sandboxing, tool and MCP server access, scoped and short-lived

Who We Are Addepar is a global data and AI platform empowering investment professionals to turn complex financial information into actionable intelligence. Addepar unifies portfolio, market and client data in a total portfolio view and delivers AI-powered insights within investment and client workflows. More than 1,500 firms in 60 countries use Addepar to manage and advise on nearly $10 trillion in assets. Its open platform integrates with 650 software, data and consulting partners to power end-to-end investment operations across firms of all sizes and levels of complexity. Addepar supports clients worldwide with offices in New York City, Salt Lake City, São Paulo, London, Edinburgh, Geneva, Warsaw, Dubai, Pune and Singapore. The Role We are currently seeking an IAM Analyst to join our growing Information Security & Risk team . The successful candidate will have the opportunity to help take Addepar’s Internal Identity & Access Management program to the next level. In this role, this person will work as part of the internal Identity & Access Management (IAM) function to improve the overall security posture of the organization. Applicants must have, and maintain, the right to work in the United Kingdom from the first day of employment. Please note that visa sponsorship is not available for this role. What You’ll Do Provide operational support for IAM related administration tools: Application onboarding and role definitions Recertification campaigns based on security and audit requirements Handling end user escalations and support requests Assist with improving the overall maturity of the internal IAM program: Analyze, design, and implement improvements to data quality and role decisions across integrated systems. Governance Initiatives, such as Entitlement Reviews and proper inventory management of identities Enhancing IAM posture including human and non-human identities. Continually improve the I

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. The Identity Governance and Access Security Team The Identity Governance and Access Security team runs Identity Governance and Administration (IGA), Privileged Access Management (PAM), and Identity Security Posture Management (ISPM) for Okta itself — serving as Okta's "Customer Zero." The team owns the complete identity lifecycle for the workforce, from birthright provisioning through Workday to access certifications, privileged access management, and mover/leaver processes. What the team builds becomes the reference architecture that Okta customers deploy at scale. The Staff Identity Security Engineer Opportunity We're looking for a Staff Identity Security Engineer to take deep technical ownership of our Okta Identity Governance (OIG), Okta Privileged Access (OPA), and ISPM implementations. This is a senior individual-contributor role where you'll set technical direction for how the team builds on top of these platforms and raise the bar for the engineering team through review, mentorship, and documentation. You should be equally comfortable in an architecture discussion, in a live Okta Workflows debugging session, and writing the design doc that a Jira epic gets broken down from. The ideal candidate is a self-starter who thrives in an autonomous environment and actively drives "what's next" for our identity security posture — identifying process bottlenecks, designing technical solutions, and pushing initiatives from concept to production without waiting

ABOUT THE ROLE The Cybersecurity Engineer is responsible for independently executing defined security engineering and operational work across Accela’s endpoints, identities, cloud platforms, and enterprise systems. This role applies established security standards and practices to troubleshoot issues, maintain technical controls, analyze findings, implement solutions, and identify opportunities to improve how the team operates. The Cybersecurity Engineer partners with IT, Engineering, DevOps, IAM, Compliance, and other teams to maintain effective technical safeguards while supporting business continuity. The role is expected to independently manage routine and moderately complex work, make sound decisions within established practices, and escalate highly complex or unfamiliar matters to senior engineers or security leadership as appropriate. The ideal candidate brings strong enterprise IT experience, hands-on exposure to security technologies, and the ability to take ownership of assigned work from identification through resolution. This individual is also expected to identify recurring issues, recommend process or automation improvements, and continue building technical depth across security tooling, cloud platforms, and enterprise systems. SPECIFIC RESPONSIBILITIES Independently manage endpoint security and compliance activities across Windows, macOS, and Linux environments, including security baselines, EDR and antivirus agents, disk encryption, MDM, and operating system hardening. Administer and troubleshoot identity and access controls, including account provisioning and deprovisioning, SSO, MFA, conditional access, and authentication issues. Monitor and analyze alerts and logs within SIEM, EDR, and related platforms, perform initial triage, take appropriate action within established procedures, and escalate complex findings when necessary. Conduct initial technical investigations by gathering and analyzing evidence, documenting findings, and recommending

About Vercel: Vercel is the agentic infrastructure company, freeing people and agents to ship what's next. For more than a decade we've helped builders move from idea to production with speed, security, and exceptional developer experience. Now we're scaling our products for both agents and people to ship and run software, built in the open and trusted by OpenAI, PayPal, Ramp, Supreme, and millions of developers worldwide. About the role: We are looking for an IT Systems Engineer to build and secure the identity and access management (IAM) and mobile device management (MDM) systems for employees who build agents and internal tools every day. You will design access and device policies that let them ship quickly without exposing company data, and automate the work with scripts, API integrations, and AI tooling alongside our IT and Security engineers. This is a hybrid role based in San Francisco, New York City, or Austin, with three days a week in the office. What you’ll do: Configure Okta, including application integrations, single sign-on (SSO), multi-factor authentication (MFA), groups, access policies, and automated provisioning Build onboarding, role-change, and offboarding automation that keeps employee access current Configure and maintain MDM for device enrollment, software deployment, patching, encryption, and compliance controls Build scripts, API integrations, and automation across Okta, MDM, Google Workspace, Slack, and IT service management systems, using AI to write and troubleshoot code and reviewing its output before it ships Partner with Security on least-privilege access that lets employees connect agents and internal tools to company systems safely, along with device security standards and access reviews, and serve as the escalation point for complex identity and device issues What you need: 7+ years of hands-on IT systems engineering experience, with deep expertise in either IAM or MDM and working knowledge of the other Administered Okta and integra

JOB TITLE: Senior Cloud Devops Engineer EXPERIENCE: 5–10 Years Approved Date: REPORTS TO: Shivendra Ashish Revised Dates: POSITIONS SUPERVISED: Role Summary: We are looking for a Senior Cloud SecOps Engineer who thrives in a high-scale, multi-tenant environment. In this role, you will act as the bridge between Cloud Operations and Security Engineering . You will not just manage infrastructure; you will build the automated systems that allow us to securely onboard, monitor, and patch dozens of client environments simultaneously. Your goal is to deliver "Security-as-a-Service" efficiently, ensuring that a security issue in one tenant is detected and isolated instantly. Core Responsibilities: Multi-Tenant Operations: Manage and secure cloud infrastructure across diverse client environments (AWS, Azure, GCP), ensuring strict data isolation and network segregation. Automated Onboarding: Build "Zero-Touch" pipelines using Infrastructure as Code ( IaC ) to provision security baselines (SIEM forwarders, Scanners, IAM roles) for new customers in minutes. Fleet Management: Design strategies to patch and update security agents across hundreds of servers/endpoints without causing downtime for clients. Centralized Observability: Maintain the central "Single Pane of Glass" platform that aggregates alerts and health metrics from all customer tenants into our SOC. Incident Response Support: Act as the Tier-3 escalation point for the SOC, investigating complex cloud infrastructure attacks or misconfigurations. Must-Have Skills Cloud Agnostic: Deep hands-on experience with at least two major cloud providers ( AWS / Azure / GCP ) and their native security tools ( GuardDuty , Sentinel, Security Hub). Infrastructure as Code: Expert in writing modular templates (e.g., Terraform, CloudFormation ) that can be reused across different clients with

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . Coinbase is looking for a Senior Manager, Security Audit to lead the Internal Audit team's global coverage of information security, cybersecurity, and infrastructure/application security. Reporting to the Global Head of Internal Audit, you'll own the security audit portfolio, spanning identity and access management, threat detection, incident response, cloud security, application security, and crypto-native controls (wallets, cold storage, key management), while managing a small team and carrying your own book of complex audits. What you'll do: Own and lead Coinbase's global security audit portfolio covering IAM, threat detection, incident response, security architecture, cryptography/key management, vulnerability management, application security, and crypto-native security (wallets, cold storage), third-party/outsourced security oversight Partner with Security Engineering, Detection & Response, and AppSec teams as the cybersecurity subject matter expert, providing independent audit perspective and advisory value while maintaining third-line objectivity. Manage and develop a team of security auditors while personally leading high-complexity, high-risk security engagements across multiple jurisdictions. Synthesize complex technical security findings into clear, risk-prioritized reports for executive leadership, the Audit Committee, and the Board. Drive proactive i