Staff IAM & AI Security Engineer

GitLab; United States; On-site; USD 180,000 - 240,000; Full time

Job summary

GitLab is seeking a Staff Security Engineer to lead identity and AI security initiatives across the enterprise. You’ll design scalable access controls, governance frameworks, and automation that reduces risk while enabling teams to move fast.

You will codify identity platforms, migrate from click-ops to code, and mentor engineers, partnering with Security, IT, Engineering, and Enterprise AI to translate complex business needs into robust technical solutions.

Qualifications

• Extensive IAM experience designing enterprise-scale solutions.
• Expert-level Okta Identity Engine and API automation.
• Strong IaC experience with Terraform/OpenTofu/Pulumi and migrating from click-ops to code.
• Proficiency writing Python for modular, tested services deployed on serverless runtimes.

Responsibilities

• Design scalable identity and AI access solutions that grow with the business.
• Replace low-code automation with engineered services on GCP Cloud Run with source control and tests.
• Codify identity platforms in Terraform/OpenTofu/Pulumi, migrating from click-ops to code.
• Architect identity across GCP and AWS with guardrails, least privilege, and federation.
• Lead identity and access engineering for enterprise AI platforms including SSO and SCIM.
• Pioneer non-human identity governance for service accounts and API keys.
• Collaborate with Security, IT, Engineering, Enterprise AI to translate needs into specs.
• Mentor senior engineers on modern identity and AI security practices.

Skills

IAM design

Enterprise security

Okta expertise

Infrastructure as code

Python programming

Cloud platforms

Leadership

Mentoring

Tools

Terraform

OpenTofu

Pulumi

Okta

GCP Cloud Run

CI/CD

Job description

GitLab is seeking a Staff Security Engineer to lead identity and AI security initiatives across the enterprise. You’ll design scalable access controls, governance frameworks, and automation that reduces risk while enabling teams to move fast.

You will codify identity platforms, migrate from click-ops to code, and mentor engineers, partnering with Security, IT, Engineering, and Enterprise AI to translate complex business needs into robust technical solutions.