Platform Security Engineer: Workload Identity & Auth Remote

RiseMe; United States; On-site; USD 180,000 - 230,000; Full time

Benefits offered by this job

401k matching

Healthcare, dental and vision coverage

Paid parental leave

Unlimited PTO

Remote-friendly

Job summary

WorkOS is seeking a security-focused platform engineer to build workload identity infrastructure and manage identity authentication for internal services with a focus on security and scalability.

You will collaborate with application teams to adopt identity standards, migrate from legacy paths, and rotate managed secrets while ensuring high availability and secure integrations across the platform.

Qualifications

• 5+ years of experience in software engineering with a security focus.
• Strong knowledge of secrets management and workload identity systems.
• Familiarity with Kubernetes and authn/authz technologies like JWTs, X.509, PKI, cert-manager, SPIFFE/SPIRE, and OPA.

Responsibilities

• Build workload identity infrastructure and provide secure runtime defaults.
• Bring identity-based authentication to internal services and migrate users.
• Eliminate static secrets and implement rotating credentials and proxies.
• Unify authorization through a single, centrally managed framework.

Skills

Security platform engineering

Secrets management

Workload identity

Kubernetes / JWTs / PKI

Tools

cert-manager

SPIFFE/SPIRE

OPA

JWTs

X.509 certificates

Job description

WorkOS is seeking a security-focused platform engineer to build workload identity infrastructure and manage identity authentication for internal services with a focus on security and scalability.

You will collaborate with application teams to adopt identity standards, migrate from legacy paths, and rotate managed secrets while ensuring high availability and secure integrations across the platform.