Security Engineer (L5) - IAM

Netflix; California (MO); Hybrid; USD 100,000 - 720,000; Full time

Job summary

An established industry player is seeking a talented security engineer to design and implement cutting-edge Identity and Access security solutions. This role offers the opportunity to work on complex IAM services, ensuring secure access for a diverse global workforce. The ideal candidate will have a strong background in IAM solutions, cloud platforms, and modern programming languages. Join a forward-thinking company that values diversity and inclusion, providing a unique culture and a comprehensive benefits package, including generous paid time off and stock options.

Benefits

Health Plans

Mental Health Support

401(k) with Employer Match

Stock Options

Disability Programs

Health Savings Accounts

Family Benefits

Paid Leave

35 Days of Paid Time Off

Qualifications

• Proven experience as a security engineer with IAM solutions.
• Strong fundamentals in AAA and Identity lifecycle.
• Experience with cloud platforms and modern programming languages.

Responsibilities

• Design and build Identity and Access security solutions.
• Work on fine-grained access controls and policy-driven security.
• Collaborate with Security and Engineering partners.

Skills

IAM Solutions Architecture

AAA (Authentication, Authorization, Accountability)

OpenID Connect

OAuth

Cloud Platforms (AWS, Azure, GCP)

Java

Python

RBAC, ABAC, PBAC

Problem-solving Skills

Communication Skills

Tools

Okta Workflows

CI/CD

NoSQL (Hive, Presto, Spark, Cassandra)

Job description

Netflix is the world's leading streaming entertainment service with 250+ million paid memberships in over 190 countries, offering TV series, documentaries, and feature films across various genres and languages. Our engineering organization supports this by enabling seamless content streaming and content production.

Identity and Authentication Security (IAS)

At Netflix, IAS is responsible for creating and operating identity and authentication services to ensure secure and seamless access to resources. Our global workforce and partners access information from diverse locations and devices. As we expand into areas like Netflix Originals, Gaming, and LIVE streaming, our IAM use cases become more complex. We invest in reliable, secure IAM services to protect our information and facilitate growth.

The Role

This role offers a unique opportunity to design and build Identity and Access security solutions for Netflix’s global employee and partner base across various business units including Enterprise, Studio, Gaming, Ads, and Live Streaming. You will be part of the Identity Integrations and Solutions Engineering (IISE) team, focusing on core Identity Lifecycle Management, Consultation, and Solutions, aiming to enable business stakeholders while minimizing access risks.

You will work closely with partners across Security and Engineering, addressing areas like:

1. Fine-grained access controls
2. Policy-driven security
3. Identity governance
4. Access management
5. Privileged access management
6. User provisioning/deprovisioning
7. Federation

What you’ll need to be successful

• Proven experience as a security engineer architecting and operating complex IAM solutions
• Strong fundamentals in AAA (Authentication, Authorization, Accountability) and Identity lifecycle
• Experience with standards and protocols like OpenID Connect, SCIM, OAuth, SAML, AD/LDAP, Federation, SSO
• Experience designing and operating complex access models using industry standards such as RBAC, ABAC, PBAC
• Experience with cloud platforms like AWS, Azure, or GCP
• Technical expertise in developing low latency, high resiliency, high-availability services with a risk-focused security approach
• Proficiency in at least one modern programming language such as Java or Python, with mastery of object-oriented design
• Strong collaboration, problem-solving skills, and comfort with ambiguity and independent decision-making
• Excellent communication skills and a product-focused mindset

Nice to have

• Experience with vendor IAM solutions like Okta Workflows, WIC, CIC
• Experience with CI/CD in cloud environments
• Familiarity with NoSQL technologies like Hive, Presto, Spark, or Cassandra
• Knowledge of GraphQL technologies

Compensation and Benefits

Our compensation is solely an annual salary, with options to allocate between salary and stock. The role's market range is $100,000 - $720,000. Benefits include health plans, mental health support, 401(k) with employer match, stock options, disability programs, health savings accounts, family benefits, and paid leave. Employees accrue 35 days of paid time off annually, with flexible options for salaried employees.

Netflix offers a unique culture and environment, emphasizing diversity and inclusion. We are an equal-opportunity employer and do not discriminate based on race, religion, or other protected categories.