Graduate Backend Engineer – Security & Identity

TikTok; San Jose (CA); On-site; USD 128,000 - 256,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) with company match

Paid parental leave

Disability insurance

Life insurance

Wellbeing benefits

Holidays and PTO

Job summary

TikTok in San Jose is seeking an Account Security Technical Architect to design the core identity authentication, session management, and account protection for our brand product ecosystem. You will address threats at scale and help shape multi-factor authentication and device fingerprinting.

You will collaborate with product, R&D, data and risk teams, implement standards like FIDO2, Passkey, OAuth2.1 and OpenID Connect, and promote Zero Trust across global services.

Qualifications

• Bachelor's degree in CS or related field.
• Experience building backend services.
• Proficient in Go, Java, C++, or Python.
• Deep understanding of architectures, data structures, and algorithms.
• Strong communication and teamwork skills.

Responsibilities

• Design account security architecture and core identity systems.
• Defend against credential stuffing, phishing, brute force, and related threats.
• Collaborate with product, R&D, data and risk teams to embed security in business scenarios.
• Implement standards such as FIDO2, Passkey, OAuth2.1, OpenID Connect, and Zero Trust.

Skills

Backend services

Go/Java/C++/Python

Computer architecture

Data structures

Communication

Teamwork

Education

Bachelor's degree in computer science or related discipline

Tools

FIDO2

Passkey

OAuth2.1

OpenID Connect

Zero Trust

Job description

TikTok in San Jose is seeking an Account Security Technical Architect to design the core identity authentication, session management, and account protection for our brand product ecosystem. You will address threats at scale and help shape multi-factor authentication and device fingerprinting.

You will collaborate with product, R&D, data and risk teams, implement standards like FIDO2, Passkey, OAuth2.1 and OpenID Connect, and promote Zero Trust across global services.