Remote Platform Security Engineer, Identity & Access

WorkOS; United States; Remote; USD 180,000 - 230,000; Full time

Benefits offered by this job

401k matching

Healthcare coverage

Parental leave

Paid time off

Remote work

Unlimited token usage

Job summary

WorkOS is seeking an experienced security-focused platform engineer to build workload identity infrastructure and advance authentication across internal services. You will partner with application platform owners to replace static secrets with short-lived credentials and drive adoption of identity-based security across teams.

In this role, you will help unify authorization with a centralized framework and collaborate with engineering to ensure high availability and secure-by-default software.

Qualifications

• 5+ years of experience in software engineering with a focus on security-related platform, infrastructure, or distributed systems.
• Strong working knowledge of secrets management, fine-grained authorization, and workload identity systems.
• Familiarity with the Kubernetes ecosystem and authentication/authorization technologies such as JWTs, X.509 certificates, PKI, cert-manager, SPIFFE/SPIRE, and OPA.
• Experience building and operating production infrastructure that other teams depend on, with attention to availability and failure modes.
• Proven ability to drive cross-team adoption of platform capabilities or lead large-scale migrations.

Responsibilities

• Build workload identity infrastructure. Make short-lived identity credentials a default part of every application's runtime environment, in partnership with application platform owners.
• Bring identity-based authentication to internal services. Work with owners of major internal dependencies to support identity certificates and drive migration.
• Eliminate static secrets. Replace all static passwords and service tokens with short-lived identity credentials, and build identity-authenticated egress proxies and abstractions.
• Unify authorization. Build a single interface and framework for centralized authorization policies and enforcement.

Skills

Platform engineering

Security

Workload identity

Kubernetes

Authn/Authz

Cross-team collaboration

AI readiness

Tools

JWTs

X.509

SPIFFE/SPIRE

OPA

cert-manager

PKI

Job description

WorkOS is seeking an experienced security-focused platform engineer to build workload identity infrastructure and advance authentication across internal services. You will partner with application platform owners to replace static secrets with short-lived credentials and drive adoption of identity-based security across teams.

In this role, you will help unify authorization with a centralized framework and collaborate with engineering to ensure high availability and secure-by-default software.