Senior Platform Security Engineer — IAM & Zero Trust

Triwill Group; San Francisco, Northern (CA, KY); Hybrid; USD 196,000 - 245,000; Full time

Job summary

Discord is seeking a Senior Engineer to advance security, software development, and operational excellence with a focus on identity and access management. You will own initiatives from design to production, shaping how engineers and services authenticate and are authorized.

You will build out Access, harden Zero Trust, and improve cloud identity baselines across multi-cloud environments, with emphasis on scalable, auditable controls and secure software supply chains.

Qualifications

• 5+ years of experience building and operating production systems or infrastructure.
• 3+ years of experience writing software in Python, TypeScript, and Rust.
• 3+ years of experience securing systems with millions of users.
• Experience building or operating identity and access management systems: authentication, authorization, or access control at scale.
• Understanding of modern authentication and authorization concepts (RBAC, OAuth, OIDC, SSO, Zero Trust network architectures, mTLS, cloud IAM).
• Experience building in and securing multi-cloud environments (e.g. GCP, Cloudflare, AWS).
• Experience designing and building software for customers (internal or external) beyond your immediate team.

Responsibilities

• Own software engineering projects end-to-end on a highly autonomous, horizontally integrated team with a lot of leverage. This is a code-forward role!
• Define what identity means for autonomous agents and other non-human actors at Discord (provisioned, scoped, authenticated, authorized, and audited).
• Build and evolve Access, Discord's employee authorization platform, to make permissions discoverable, role-based, least privilege, and self-serve.
• Design and harden our Zero Trust architecture, spanning human and service-to-service auth for Discord's internal tooling.
• Automate continuous permission right-sizing in the spirit of least privilege.
• Develop and apply secure baselines for cloud identity, and help secure our software supply chain from the dev environment through CI/CD and into production.
• Consult on risk assessments, architectural designs, threat models, code reviews, and more, pragmatically balancing security with other business considerations.

Skills

Python

TypeScript

Rust

Security engineering

IAM systems

OAuth

OIDC

SSO

RBAC

mTLS

Cloud IAM

Multi-cloud

Tools

Kubernetes

Docker

Terraform

Buildkite

Teleport

Vault

Job description

Discord is seeking a Senior Engineer to advance security, software development, and operational excellence with a focus on identity and access management. You will own initiatives from design to production, shaping how engineers and services authenticate and are authorized.

You will build out Access, harden Zero Trust, and improve cloud identity baselines across multi-cloud environments, with emphasis on scalable, auditable controls and secure software supply chains.