Senior Platform Security Engineer: IAM & Zero Trust

JobCubby; San Francisco, Northern (CA, KY); Hybrid; USD 196,000 - 245,000; Full time

Job summary

Discord is seeking a Senior Security Engineer focused on identity and access management to protect and scale access across engineering systems. You will own end-to-end security projects, define identities for services and non-human actors, and evolve a scalable employee access platform with Zero Trust foundations.

Responsibilities include implementing PKI/mTLS service identities, auditing access, and integrating IAM across GCP, AWS, and Cloudflare.

Qualifications

• 5+ years of experience building and operating production systems or infrastructure.
• 3+ years writing software in Python, TypeScript, and Rust.
• 3+ years securing systems with millions of users.
• Experience building or operating IAM systems: authentication, authorization, or access control at scale.
• Understanding modern authentication/authorization: RBAC, OAuth, OIDC, SSO, Zero Trust, mTLS, cloud IAM.
• Experience in multi-cloud environments (GCP, Cloudflare, AWS).
• Designing and building software for customers beyond your team.

Responsibilities

• Own end-to-end engineering projects on a highly autonomous, horizontal team with code-forward focus.
• Define identity for autonomous agents and non-human actors; build primitives for this vision.
• Build and evolve Access, Discord's employee authorization platform, for discoverable, least-privilege access.
• Harden Zero Trust architecture for human and service-to-service auth across internal tooling.
• Automate permission right-sizing in line with least privilege.
• Develop secure baselines for cloud identity and secure the software supply chain from dev to prod.
• Consult on risk assessments, designs, threat models, and code reviews balancing security with business needs.
• Work on service-to-service authentication, PKI/mTLS-based identity provisioning, and auditable access tooling.

Skills

Python

TypeScript

Rust

IAM at scale

OAuth

OIDC

RBAC

SSO

mTLS

GCP

AWS

Kubernetes

Docker

Terraform

Buildkite

Tools

Kubernetes

Docker

Terraform

Buildkite

Job description

Discord is seeking a Senior Security Engineer focused on identity and access management to protect and scale access across engineering systems. You will own end-to-end security projects, define identities for services and non-human actors, and evolve a scalable employee access platform with Zero Trust foundations.

Responsibilities include implementing PKI/mTLS service identities, auditing access, and integrating IAM across GCP, AWS, and Cloudflare.