Senior Security Engineer - Workforce Security - Identity, Access and Authorization

What you'll do

• Design and deliver cloud access management and authorization services, including back-end systems, APIs, policy engines, and front-end experiences.
• Integrate with cloud identity systems and automate security control testing, evidence collection, monitoring, and remediation.
• Threat-model systems, evaluate security technologies, and help develop authentication and authorization for workforce AI agents.

What they ask for

• 5+ years of professional experience building and shipping production software, including meaningful time on security-relevant systems.
• Full-stack development experience with Java and Spring, Python, and React or Angular.
• Hands-on AWS or GCP experience, including identity and access primitives; production IAM experience covering RBAC or ABAC, SSO, SAML, OIDC, OAuth 2.0, and token and credential lifecycle.
• BS/MS in Computer Science or a related field, or equivalent practical experience.

Nice to have

• Fine-grained authorization experience, such as OPA and Rego, AWS Cedar, Zanzibar-style authorization, or XACML.
• Experience with cloud entitlement management, identity governance, regulatory access controls, threat modeling, non-human identity, or production AI applications.

Pay

San Diego $161,000 - $218,000 (base salary)

Tools

Java, Spring, Python, React, Angular, AWS, GCP, OPA and Rego

AI focus

Use GenAI tools and orchestrate agents across engineering work; apply security rigor to AI systems and build identity and authorization for workforce agents.