Security Software Engineer 5

Netflix; Polska; On-site; PLN 400,000 - 650,000; Full time

Benefits offered by this job

Flexible work schedule

Learning and development

Diversity and inclusion

Job summary

Netflix is hiring a Security Services Engineer in Warsaw to build and operate the access experience layer that protects internal systems. You will own design, implementation, and rollout of access tooling, including the Turnstile adoption layer, APIs, SDKs, and self-service workflows for engineering teams across multiple time zones.

Collaborating with ACE Core and SSE Org, you will ship scalable, low-latency services with a security-first mindset to enable secure access across Netflix

Qualifications

• Experience designing and building developer-facing APIs, SDKs, and integration patterns.
• Proficiency with authentication/authorization concepts (OIDC, OAuth, SAML, SCIM).
• Strong written communication and collaborative problem-solving.

Responsibilities

• Own system design for access control tooling and integration services.
• Build and operate the adoption layer for Turnstile and related APIs/SDKs.
• Collaborate across ACE Core and SSE Org across time zones in an async-first model.
• Deliver scalable, secure, low-latency services with a security-first mindset.

Skills

Java

Kotlin

Go

Python

API design

OIDC/OAuth/SAML/SCIM

Security engineering

GraphQL

gRPC

REST APIs

Tools

Turnstile

CI/CD

AWS

Kubernetes

Job description

Netflix is one of the world's leading entertainment services, with over 300 million paid memberships in over 190 countries enjoying TV series, films and games across a wide variety of genres and languages. Members can play, pause and resume watching as much as they want, anytime, anywhere, and can change their plans at any time.

The Security Services Engineering organization supports the Netflix workforce by creating and operating the security access control model, including, but not limited to, authentication, authorization, and cryptographic software services. Our Access Control use cases will continue to become more complex as we increase investment in Netflix Originals content production ecosystems, including but not limited to Content, GenAI, Ads, Gaming, Live streaming, and more. Our workforce and partners are global, and they access our information in different patterns and with varying needs from various locations and devices. With security and ease of information access in mind for our fast-paced growth, we realize that the traditional corporate network security perimeter no longer meets our requirements. Instead, we invest in Identity as a perimeter in the open internet, with reliable, robust, and strong access-control models and services to protect our information.

The Role

This role is a unique opportunity to build the access experience layer at Netflix — designing, building, and operating the services that make access control safe and simple for hundreds of internal engineering teams. You will be part of the Access Experience Engineering (AXE) team in Warsaw, Poland, focusing on the integration and experience layer that sits on top of Netflix's core access control infrastructure. You will partner closely with ACE and the SSE Org, both primarily based in UCAN, as part of a follow-the-sun, async-first model. You will be responsible for a mix of projects encompassing ownership of system design, implementation, partner integration, rollout strategy, and maintenance of access tooling and integration services — including the adoption layer for Turnstile, Netflix's next-generation access management platform, as well as APIs, SDKs, and self-service workflows that enable internal teams to implement access securely and consistently. One engineer on this team will serve as the in-timezone security anchor — a technical lead who brings a pragmatic, risk-aware lens to AXE's designs and implementations and partners directly with ACE Core on security architecture decisions.

What You'll Need To Be Successful

• You are a collaborative problem-solver who excels at navigating ambiguity, making and communicating self-driven decisions, and weighing trade-offs. You own the problems and influence others.
• Pragmatic engineer focused on building scalable, reliable, high-availability, and low-latency services.
• Proficiency in modern languages (Java preferred, or Kotlin, Go, Python) and a willingness to traverse the tech stack.
• Experience designing and building developer-facing APIs, SDKs, and integration patterns that make complex systems easy for other teams to adopt.
• Familiarity with access control and IAM concepts — identity, authentication, authorization, roles, groups, attributes, and resource models. Experience with auth protocols, including OpenID Connect, OAuth, SAML, and SCIM, is valuable; strong software engineering fundamentals with a genuine interest in the domain are equally welcome.
• Experience with GraphQL, gRPC, Rest, etc
• You possess strong written communication skills and a product-focused mindset, with a security-first approach, allowing you to deliver effective solutions while operating effectively across EMEA and UCAN time zones in an async-first environment.

Nice To Have

• Expertise in designing complex Access Control Models using industry standards like RBAC, ABAC, or PBAC.
• Experience in continuous integration and continuous deployment in a Cloud platform.
• Experience with NoSQL technologies such as Hive, Presto, Spark, or Cassandra.
• Experience with Graph databases.
• React or modern frontend framework experience for full-stack roles.

Inclusion is a Netflix value and we strive to host a meaningful interview experience for all candidates.

If you want an accommodation/adjustment for a disability or any other reason during the hiring process, please send a request to your recruiting partner.

We are an equal-opportunity employer and celebrate diversity, recognizing that diversity builds stronger teams.

We approach diversity and inclusion seriously and thoughtfully.

We do not discriminate on the basis of race, religion, color, ancestry, national origin, caste, sex, sexual orientation, gender, gender identity or expression, age, disability, medical condition, pregnancy, genetic makeup, marital status, or military service.