{"schemaVersion":"jobsearcher.job.v1","id":"be60c13f162b35962f24d4d5","url":"https://jobsearcher.com/jobs/be60c13f162b35962f24d4d5","canonicalUrl":"https://jobsearcher.com/jobs/be60c13f162b35962f24d4d5","title":"Software Engineer - Infrastructure Security","description":"About WorkOS\n\nWorkOS builds modern developer tools and APIs that make it easy for companies to become Enterprise Ready. Our platform powers authentication, identity, authorization, and other critical infrastructure that developers need to securely scale their products to large organizations.\n\nWe recently raised a $100M Series C, valuing the company at $2B, led by Meritech and Sapphire with participation from Greenoaks, Craft, Abstract, and Audacious. WorkOS powers enterprise features for many of the fastest-growing AI companies, including OpenAI, Cursor, and Perplexity, Sierra, and Plaid.\n\nAs AI reshapes software, WorkOS is at the frontier of Human and Agent Authentication, Identity, and Access Control helping companies answer a new critical question: who are your agents, and what are they allowed to do? Our fast-growing customer base includes hundreds of modern software companies building the next generation of enterprise-ready products.\n\nAbout the Security Platform team\n\nThe Infrastructure Security team provides and supports the primitives that enable engineering to securely build applications and meet compliance obligations, while abstracting away the underlying complexity for the best possible developer experience.\n\nOur work centers on workload identity and authorization: how internal applications authenticate to each other and to the services they depend on, and how that access is granted and enforced. We're replacing static secrets with short-lived identity credentials, bringing identity-based authentication to the services engineers use every day, and unifying how authorization is managed across the company.\n\nWe're a platform engineering team with a security mission. We measure success by the security outcomes we enable and by how much engineers enjoy building on what we ship — the secure path should be the easiest path.\n\nWho we're looking for\n\nA platform builder. You love building infrastructure that other engineers rely on every day, and you sweat the developer experience details that make adoption effortless.\n\nFluent in service-to-service auth. You know authentication and authorization deeply: JWTs, X.509 certificates, and when to reach for each.\n\nA systems thinker. You reason carefully about bootstrapping, circular dependencies, availability, and failure modes, especially for infrastructure that everything else depends on.\n\nA pragmatic migrator. You know that shipping the primitive is half the job. You can drive adoption across many teams, meet them where they are, and retire the legacy path.\n\nA strong partner to engineering. You build trust with engineers by understanding their priorities and making security frictionless.\n\nExcited about AI. You're embracing AI and automation to scale platform work and reduce toil.\n\nCurious and humble. You ask the basic questions, enjoy untangling complex systems, and bring others along with you.\n\nResponsibilities\n\nBuild workload identity infrastructure. Make short-lived identity credentials a default part of every application's runtime environment, in partnership with application platform owners.\n\nBring identity-based authentication to internal services. Work with the owners of major internal dependencies to support identity certificates, make them the golden path for newly onboarding applications, and drive migration of existing ones.\n\nEliminate static secrets. Replace all static passwords and service tokens with short-lived identity credentials, and build identity-authenticated egress proxies and API abstractions that inject and automatically rotate managed secrets for the external dependencies that still require them.\n\nUnify authorization. Build a single interface and framework through which authorization policies are centrally managed and enforced.\n\nQualifications\n\n5+ years of experience in software engineering, with a focus on security-related platform, infrastructure, or distributed systems.\n\nStrong working knowledge of secrets management, fine-grained authorization, and workload identity systems.\n\nFamiliarity with the Kubernetes ecosystem and authentication/authorization technologies such as JWTs, X.509 certificates, PKI, cert-manager, SPIFFE/SPIRE, and OPA.\n\nExperience building and operating production infrastructure that other teams depend on, with attention to availability and failure modes.\n\nProven ability to drive cross-team adoption of platform capabilities or lead large-scale migrations.\n\nBenefits and Perks (US Only)\n\nAt WorkOS, we offer resources that emphasize personal and familial well-being. We offer healthcare coverage for you and your family, including medical, dental, and vision. We offer parental leave, paid-time off and fully remote working arrangements.\n\n401k matching\n\nCompetitive Equity\n\nHealthcare, dental and vision coverage\n\nFSA, ST/LT Disability, Voluntary Life\n\nCarrot fertility benefits\n\n20 days paid vacation + 10 holidays + unlimited sick leave\n\n12 weeks fully paid parental leave\n\nFitness: Monthly stipend for gyms, yoga classes, race registrations or whatever keeps you active\n\nWellness: Monthly stipend for a massage, meditations class, therapy, or activities that enhance your well-being\n\nCommuter benefits for hybrid employees in SF/NYC\n\nUnlimited token usage!\n\nPlease inquire directly with our recruiting team for benefits available to those working outside the US.\n\nEqual Opportunity Employer\n\nWorkOS is an equal opportunity employer, committed to diversity and inclusiveness. We will consider all qualified applicants without regard to race, color, nationality, gender, gender identity or expression, sexual orientation, religion, disability or age.\n\nWe may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.\n\nCompensation Range: $175K - $275K","company":"Workos","rawCompany":"workos","city":"Millbrae","state":"CA","isRemote":false,"isActive":false,"createdAt":"2026-09-24T07:22:41.198Z","occupations":[{"code":"15-1299.08","title":"Computer Systems Engineers/Architects","slug":"computer-systems-engineers-architects"},{"code":"15-1252.00","title":"Software Developers","slug":"software-developers"},{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"513210","title":"Software Publishers","slug":"software-publishers"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Software Engineer - Infrastructure Security","description":"About WorkOS\n\nWorkOS builds modern developer tools and APIs that make it easy for companies to become Enterprise Ready. Our platform powers authentication, identity, authorization, and other critical infrastructure that developers need to securely scale their products to large organizations.\n\nWe recently raised a $100M Series C, valuing the company at $2B, led by Meritech and Sapphire with participation from Greenoaks, Craft, Abstract, and Audacious. WorkOS powers enterprise features for many of the fastest-growing AI companies, including OpenAI, Cursor, and Perplexity, Sierra, and Plaid.\n\nAs AI reshapes software, WorkOS is at the frontier of Human and Agent Authentication, Identity, and Access Control helping companies answer a new critical question: who are your agents, and what are they allowed to do? Our fast-growing customer base includes hundreds of modern software companies building the next generation of enterprise-ready products.\n\nAbout the Security Platform team\n\nThe Infrastructure Security team provides and supports the primitives that enable engineering to securely build applications and meet compliance obligations, while abstracting away the underlying complexity for the best possible developer experience.\n\nOur work centers on workload identity and authorization: how internal applications authenticate to each other and to the services they depend on, and how that access is granted and enforced. We're replacing static secrets with short-lived identity credentials, bringing identity-based authentication to the services engineers use every day, and unifying how authorization is managed across the company.\n\nWe're a platform engineering team with a security mission. We measure success by the security outcomes we enable and by how much engineers enjoy building on what we ship — the secure path should be the easiest path.\n\nWho we're looking for\n\nA platform builder. You love building infrastructure that other engineers rely on every day, and you sweat the developer experience details that make adoption effortless.\n\nFluent in service-to-service auth. You know authentication and authorization deeply: JWTs, X.509 certificates, and when to reach for each.\n\nA systems thinker. You reason carefully about bootstrapping, circular dependencies, availability, and failure modes, especially for infrastructure that everything else depends on.\n\nA pragmatic migrator. You know that shipping the primitive is half the job. You can drive adoption across many teams, meet them where they are, and retire the legacy path.\n\nA strong partner to engineering. You build trust with engineers by understanding their priorities and making security frictionless.\n\nExcited about AI. You're embracing AI and automation to scale platform work and reduce toil.\n\nCurious and humble. You ask the basic questions, enjoy untangling complex systems, and bring others along with you.\n\nResponsibilities\n\nBuild workload identity infrastructure. Make short-lived identity credentials a default part of every application's runtime environment, in partnership with application platform owners.\n\nBring identity-based authentication to internal services. Work with the owners of major internal dependencies to support identity certificates, make them the golden path for newly onboarding applications, and drive migration of existing ones.\n\nEliminate static secrets. Replace all static passwords and service tokens with short-lived identity credentials, and build identity-authenticated egress proxies and API abstractions that inject and automatically rotate managed secrets for the external dependencies that still require them.\n\nUnify authorization. Build a single interface and framework through which authorization policies are centrally managed and enforced.\n\nQualifications\n\n5+ years of experience in software engineering, with a focus on security-related platform, infrastructure, or distributed systems.\n\nStrong working knowledge of secrets management, fine-grained authorization, and workload identity systems.\n\nFamiliarity with the Kubernetes ecosystem and authentication/authorization technologies such as JWTs, X.509 certificates, PKI, cert-manager, SPIFFE/SPIRE, and OPA.\n\nExperience building and operating production infrastructure that other teams depend on, with attention to availability and failure modes.\n\nProven ability to drive cross-team adoption of platform capabilities or lead large-scale migrations.\n\nBenefits and Perks (US Only)\n\nAt WorkOS, we offer resources that emphasize personal and familial well-being. We offer healthcare coverage for you and your family, including medical, dental, and vision. We offer parental leave, paid-time off and fully remote working arrangements.\n\n401k matching\n\nCompetitive Equity\n\nHealthcare, dental and vision coverage\n\nFSA, ST/LT Disability, Voluntary Life\n\nCarrot fertility benefits\n\n20 days paid vacation + 10 holidays + unlimited sick leave\n\n12 weeks fully paid parental leave\n\nFitness: Monthly stipend for gyms, yoga classes, race registrations or whatever keeps you active\n\nWellness: Monthly stipend for a massage, meditations class, therapy, or activities that enhance your well-being\n\nCommuter benefits for hybrid employees in SF/NYC\n\nUnlimited token usage!\n\nPlease inquire directly with our recruiting team for benefits available to those working outside the US.\n\nEqual Opportunity Employer\n\nWorkOS is an equal opportunity employer, committed to diversity and inclusiveness. We will consider all qualified applicants without regard to race, color, nationality, gender, gender identity or expression, sexual orientation, religion, disability or age.\n\nWe may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.\n\nCompensation Range: $175K - $275K","datePosted":"2026-09-24T07:22:41.198Z","dateModified":"2026-09-24T07:22:41.198Z","hiringOrganization":{"@type":"Organization","name":"Workos","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Millbrae","addressRegion":"CA","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"be60c13f162b35962f24d4d5"},"url":"https://jobsearcher.com/jobs/be60c13f162b35962f24d4d5"}}