Senior Platform Security Engineer, Identity & Access

Discord Inc.; San Francisco (CA); On-site; USD 196,000 - 245,000; Full time

Job summary

Discord Inc. is seeking a Senior Security Engineer focused on identity and access management to advance secure-by-design practices across the platform.

You will own end-to-end security projects, shape how humans and non-human actors are provisioned, authenticated, and authorized, and help reduce risk across engineering. This role is based in our San Francisco office, with the Hiring Manager expecting 1–2 days in the office per week.

Qualifications

• 5+ years of experience building and operating production systems or infrastructure.
• 3+ years of experience writing software in Python, TypeScript, or Rust.
• 3+ years of experience securing systems with millions of users.
• Experience building or operating identity and access management systems: authentication, authorization, or access control at scale.
• Understanding of modern authentication and authorization concepts (RBAC, OAuth, OIDC, SSO, Zero Trust, mTLS, cloud IAM).
• Experience building in and securing multi-cloud environments (GCP, Cloudflare, AWS).
• Experience designing and building software for customers beyond your immediate team.

Responsibilities

• Own software projects end-to-end on a highly autonomous, horizontally integrated team.
• Define identity for autonomous agents and other non-human actors at Discord and create primitives to implement that vision.
• Build and evolve Access, Discord's employee authorization platform, to be discoverable, role-based, least privilege, and self-serve.
• Design and harden our Zero Trust architecture for human and service-to-service auth.
• Automate continuous permission right-sizing in the spirit of least privilege.
• Develop secure baselines for cloud identity and help secure our software supply chain from development to production.
• Consult on risk assessments, architectural designs, threat models, and code reviews.

Skills

IAM systems

Software development

Python/TypeScript/Rust

Zero Trust

Multi-cloud

PKI/mTLS

Security engineering

Tools

Teleport

Kubernetes

Docker

Terraform

Buildkite

Job description

Discord Inc. is seeking a Senior Security Engineer focused on identity and access management to advance secure-by-design practices across the platform.

You will own end-to-end security projects, shape how humans and non-human actors are provisioned, authenticated, and authorized, and help reduce risk across engineering. This role is based in our San Francisco office, with the Hiring Manager expecting 1–2 days in the office per week.