Remote Infrastructure Security Engineer: Identity & Access

WorkOS

San Francisco (CA)

Hybrid

USD 175,000 - 275,000

Full time

7 days ago

Be an early applicant

Application generator

A complete application in a minute — tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

401k matching

Equity

Healthcare coverage

FSA and Disability

Fertility benefits

Paid time off

Parental leave

Gym stipend

Wellness stipend

Commuter benefits

Unlimited tokens

Job summary

WorkOS in San Francisco is seeking a Security Platform Engineer to join the Infrastructure Security team. You will build workload identity infrastructure, enable identity-based authentication across internal services, and drive adoption of secure platform capabilities across teams.

You will replace static secrets with short-lived credentials, unify authorization policies, and ship developer-friendly primitives that scale with our growth, emphasizing reliability and developer experience.

Qualifications

5+ years in software engineering with security-focused platform or infrastructure experience.
Strong knowledge of secrets management, fine-grained authorization, and workload identity.
Familiarity with Kubernetes and authentication/authorization tech like JWTs, X.509, PKI, SPIFFE/SPIRE, OPA.
Experience building and operating production infra used by multiple teams, with focus on availability.
Proven ability to drive cross-team adoption of platform capabilities or migrations.

Responsibilities

Build workload identity infrastructure and short-lived credentials for runtimes.
Bring identity-based authentication to internal services and drive migration to secure paths.
Eliminate static secrets and implement identity-authenticated proxies and abstractions.
Unify authorization through a centralized interface and policy framework.