Staff Security Platform Engineer – Identity & Access

Robinhood; Bellevue (WA); On-site; USD 230,000 - 270,000; Full time

Benefits offered by this job

Health insurance

Equity ownership

401(k) matching

Paid time off

Generous benefits

Job summary

Robinhood's Security Engineering team is building the identity and access control plane that secures our infrastructure. As a Staff Software Engineer, you will shape the identity architecture, define technical strategy, and build Tier-0 access infrastructure used across the company, solving authentication and authorization challenges for AI and agentic workflows.

You'll lead design and implementation of modern identity protocols, mentor engineers, and partner with Infrastructure, Data, and

Qualifications

• 8+ years of backend or security platform engineering experience.
• Experience building security platforms and identity infrastructure from scratch.
• Strong understanding of identity primitives and least-privilege access.
• Experience with OAuth 2.0, OpenID Connect, SAML, or WebAuthn.
• Experience with policy-based access controls (RBAC/ABAC).
• Experience governing AI agents, LLMs, or non-human workloads.

Responsibilities

• Define core identity architecture across employee, service, and agentic access.
• Design, build, and operate high-availability identity infrastructure (Go/Python/Rust, cloud-native).
• Implement AuthN & AuthZ using modern protocols (OAuth 2.0, OpenID Connect, RBAC, ABAC).
• Develop governance for AI agents, LLMs, and MCP systems.
• Create self-service developer access platforms and tooling.
• Set technical direction and mentor engineers across the org.

Skills

Backend engineering

Security platform

Identity infrastructure

OAuth 2.0

OpenID Connect

RBAC

ABAC

AI governance

Kubernetes

AWS

Tools

Go

Python

Rust

AWS

Kubernetes

Job description

Robinhood's Security Engineering team is building the identity and access control plane that secures our infrastructure. As a Staff Software Engineer, you will shape the identity architecture, define technical strategy, and build Tier-0 access infrastructure used across the company, solving authentication and authorization challenges for AI and agentic workflows.

You'll lead design and implementation of modern identity protocols, mentor engineers, and partner with Infrastructure, Data, and