Senior Platform Security Engineer - Identity & Access

Discord; San Francisco (CA); On-site; USD 196,000 - 245,000; Full time

Job summary

Discord seeks a Senior Engineer to advance Platform Security with a focus on identity and access management. You will own end-to-end security projects, define identity for human and non-human actors, and evolve an authorization platform to enforce least privilege and self-serve access.

Ideal candidates have 5+ years building production systems and 3+ years securing services for millions of users across multi-cloud environments, with strong scripting or programming skills in

Qualifications

• 5+ years building and operating production systems or infrastructure.
• 3+ years writing software in Python, TypeScript, or Rust.
• 3+ years securing systems with millions of users.
• Experience IAM: authentication, authorization, access control at scale.
• Understanding OAuth/OIDC/SSO, RBAC, Zero Trust concepts.
• Experience in multi-cloud environments (GCP, AWS, Cloudflare).

Responsibilities

• Own software projects end-to-end on a highly autonomous team.
• Define identity for autonomous agents and non-human actors.
• Build and evolve Access, Discord's employee authorization platform.
• Design and harden Zero Trust architecture for internal tooling.
• Automate permission right-sizing following least privilege.
• Develop secure cloud identity baselines and secure CI/CD pipelines.
• Consult on risk assessments, designs, threat models, and code reviews.

Skills

Production systems

Python/TypeScript/Rust

IAM at scale

OAuth/OIDC/SSO

Multi-cloud

Tools

Kubernetes

Terraform

Teleport

Job description

Discord seeks a Senior Engineer to advance Platform Security with a focus on identity and access management. You will own end-to-end security projects, define identity for human and non-human actors, and evolve an authorization platform to enforce least privilege and self-serve access.

Ideal candidates have 5+ years building production systems and 3+ years securing services for millions of users across multi-cloud environments, with strong scripting or programming skills in