Staff Security Engineer, Identity Access Management

Description

The company makes Snapchat, a visual messaging app, along with Specs Inc., a wholly-owned subsidiary focused on making computing more human, and other products including Bitmoji and Saturn.

The Security organization protects the company's global community by securing the systems and data behind Snapchat, which serves hundreds of millions of people every day. Security work is built into every product and service from the start.

This is a Staff Security Engineer role acting as technical lead for SnapIAM, the company's identity and access management platform. SnapIAM offers one central place to manage identities and access policies across cloud environments and services. You will set technical direction and deliver secure, reliable, and usable access capabilities for the company's engineering teams.

Responsibilities

• Define the technical strategy and multi-year roadmap for SnapIAM, turning company-wide identity and access needs into scalable platform features.
• Lead design, build, and operation of SnapIAM services that manage identities, access policies, and permissions across cloud platforms.
• Drive secure, reliable, and maintainable solutions for cloud access management, workload and service identities, and access governance.
• Lead complex initiatives spanning several teams, from technical design through rollout, migration, and ongoing operation. Find dependencies and clear technical blockers.
• Work with Infrastructure, Engineering, and Security teams to integrate SnapIAM and drive adoption. Balance least-privilege access against developer productivity and ease of use.
• Set architecture, engineering standards, and operating practices that improve reliability, observability, and safe change management.
• Write production-quality code, lead design and code reviews, and mentor engineers to build technical skill and team ownership.
• Use AI-enabled engineering tools where they fit, to raise engineering speed and quality. Apply sound judgment and human review to generated work.

Requirements

• Deep knowledge of identity and access management, including authentication, authorization, access policy design, and least-privilege controls.
• Strong software engineering fundamentals and experience designing, building, and running distributed systems.
• Experience designing and implementing cloud security or identity systems, including access controls and policy management.
• Ability to set technical strategy, weigh architectural tradeoffs well, and deliver platform initiatives that run over multiple quarters.
• Ability to influence technical decisions and align partner teams across organizational lines.
• Strong written and verbal communication, including explaining complex technical decisions to engineering and security partners.
• Experience keeping high standards for code quality, testing, reliability, and operational readiness.
• A bachelor's degree in a related technical field such as computer science or engineering, or equivalent practical work experience.
• 9+ years of industry experience after a bachelor's degree. Alternatively, a master's degree in a technical field plus 8+ years of security or software engineering experience after it, or a PhD in a related technical field plus 5+ years of post-graduate security or software engineering experience.
• 1+ year of experience providing technical leadership or acting as domain expert for an engineering organization.
• Experience designing and implementing identity and access management systems, cloud access controls, or security platforms.
• Experience architecting, designing, and developing distributed systems.
• Preferred: experience with cloud identity and access management across GCP and AWS.
• Preferred: experience with workload or service identity, access governance, or identity lifecycle management.
• Preferred: experience leading migrations from legacy access-management systems to centralized platforms.
• Preferred: experience building automation and self-service workflows that improve access security and developer experience.
• Preferred: experience setting technical direction and delivering platform roadmaps across multiple engineering teams.

Conditions

You are expected to work in the office 4+ days per week, under the company's default-together approach.

In the United States, each work location sits in a pay zone that sets the salary range. Starting pay depends on job-related skills, experience, qualifications, work location, and market conditions, and may be negotiable within the range. Pay zones may change in future.

Zone A (CA, WA, NYC): base salary of $251,000-$377,000 per year.

Zone B: base salary of $238,000-$358,000 per year.

Zone C: base salary of $213,000-$320,000 per year.

This role is eligible for equity in the form of RSUs.

The company is an equal opportunity employer and considers applicants regardless of protected characteristics, in line with applicable law, including applicants with criminal histories.

Benefits

• Paid parental leave, comprehensive medical coverage, and emotional and mental health support programs.
• Compensation packages that let you share in the company's long-term success.