Staff Security Engineer

Staff Security EngineerLocation: Hybrid in one of these places 2 days a week: Orange County, CA, Seattle, WA, Columbus, OH, or DC (So must be in the nearby area of these locations only) Mode of interview: 2 Virtual InterviewsJob DescriptionSummary The Application and Security Engineering team is looking for a Staff Security Engineer to focus on identity and access management and build and maintain world-class defensive controls to protect the systems we use to build our advanced defense technology products.ResponsibilitiesBuild an identity engine that powers the whole company and supercharges our security programCreate applications that enable and enforce our identity framework across the companyDevelop integrations that unify identities across IdPs, cloud providers, SaaS tools, and internal systemsAutomate identity lifecycle operations, including provisioning, access reviews, and offboardingCollaborate with other IAM engineers and partner teams to define architecture and ship iterativelyRequired QualificationsStrong programming ability in one or more general-purpose languages (Go, Rust, etc.)Experience with one or more infrastructure-as-code languages (e.g., Terraform, AWS CDK) in a production capacityExperience with identity protocols (SAML, OIDC, SCIM, OAuth) or identity providers (Okta, Azure AD, etc.)Proven ability to translate system design requirements into clean, maintainable implementationsExperience leading or contributing to architecture and design reviewsExperience working with cloud platforms and deploying applications through CI/CD pipelinesAbility to work autonomously, take ownership of projects, and collaborate across teamsEligible to obtain and maintain a U.S. TS clearanceExperience working in environments with complex identity or access issues, including troubleshooting across distributed systems is preferredFamiliarity with RBAC, ABAC, or policy-as-code frameworks (e.g., OPA, Cedar)- preferredExperience building bespoke solutions in high-growth and high-complexity environments is preferredExperience with AWS, Azure, or GCP ecosystems and tooling is highly preferred