Staff Security Engineer, ID.me

• 7+ years of experience in security engineering, systems engineering, software engineering, or SRE roles
• Current hands on experience with GCP or AWS
• 2+ years of experience dedicated to Cloud Site Reliability Engineering and related roles
• 5+ years of current and hands on experience in scripting or software development (i.e. Python, Ruby, Go)
• 5+ years of current and hands-on experience with infrastructure-as-code and CI/CD (e.g. Terraform, Github, etc.)

Desirable

• ID.me is looking for a Staff Security Engineer to add to our growing security team. If you love innovation, here's your chance to make a career of it by advancing the digital identity ecosystem
• We are seeking a talented Staff Security Engineer who enjoys the challenges of combining software and systems engineering to design, build, run, and automate distributed, fault-tolerant security solutions at scale
• As a Staff Security Engineer, you will lead the design and development of scalable security solutions that realize/execute the strategies across the entire Security Program (i.e. , SecOPs, Data Protection, CloudFlare, Privileged Access Management, IAM, etc.)
• The Staff Security Engineer will also have the opportunity to provide thought leadership, research, and innovation on a broad scale
• Implement, manage, and improve CloudFlare capabilities, (WAF, VPN, DNS, etc.), via Terraform, Github, and Github Actions
• Implement security solutions in GCP via Terraform and Python and JavaScript coding
• Implement CloudFlare Workers via requisite coding languages
• Integrate solutions with Okta, and support triage and troubleshooting
• Build integrations with Google SecOPs SIEM, and define queries as needed
• Build integrations with ConductorOne IGA solution, including workflow and policy implementation within the tool
• Improve GCP and AWS security posture, via hands-on skills in one or more of these CSPs, including hands-on skills scripting with one or more of the associated API layers
• Leverage deep Jira knowledge and experience to define and deliver Sprints with Scrum Master and Product Owner, as well as ticket handling within SLAs
• Continuously improve Change Management processes, guidelines, and documentation across security tools/services to ensure reliability, efficiency (e.g. , increased automation via Open Policy Agents), and compliance
• Measure and report on reliability, efficiency, and compliance of security tool/service operations
• Ensure security controls are optimized for ease of use by both security operators and end users
• Dig deep into complex problems either lacking a clear approach or with a high degree of execution risk and find an appropriate path forward
• Maintain many of the essential cross-team and cross-functional relationships necessary for the team's success
• Define standards and best practices for the team and the security organization