Remote Platform Security Engineer - Identity & Auth

Kos Ai; Marion, Northern (KS, KY); Hybrid; USD 190,000 - 230,000; Full time

Benefits offered by this job

401k matching

Competitive equity

Healthcare coverage

Paid time off

Parental leave

Remote-friendly

Job summary

WorkOS is seeking a Senior Security Platform Engineer to advance workload identity and authentication across internal services. You will help replace static secrets with short-lived credentials and drive secure access across major dependencies.

You will partner with engineering teams to unify authorization policies, while reinforcing reliability and scalable security practices for enterprise-ready platforms.

Qualifications

• 5+ years of experience in software engineering with security-focused platform, infrastructure, or distributed systems.
• Strong knowledge of secrets management and workload identity systems.
• Experience building and operating production infrastructure with high availability.

Responsibilities

• Build workload identity infrastructure to embed short-lived credentials in runtimes.
• Bring identity-based authentication to internal services and migrate dependencies.
• Eliminate static secrets, rotate managed credentials, and build secure egress proxies.
• Unify authorization through a central interface and policy framework.

Skills

Secrets management

Workload identity

Kubernetes

JWTs

X.509 certificates

Cross-team collaboration

Tools

cert-manager

SPIFFE/SPIRE

OPA

Job description

WorkOS is seeking a Senior Security Platform Engineer to advance workload identity and authentication across internal services. You will help replace static secrets with short-lived credentials and drive secure access across major dependencies.

You will partner with engineering teams to unify authorization policies, while reinforcing reliability and scalable security practices for enterprise-ready platforms.