Senior Security Engineer on IAM team at Shipt designing authentication and authorization services. Collaborating with security, infrastructure, and product engineering teams for operational excellence.
Responsibilities
Design and own mission‑critical authentication and authorization services that keep Shipt secure and seamless.
Build and evolve secure, scalable IAM capabilities—SSO, MFA, token services, policy, and role management—integrating platforms like Auth0 and Okta with our applications and API Gateway.
Collaborate closely with Security, Infrastructure, and Product engineering teams to drive best practices, reliability, and a great developer experience.
Set the bar for code quality and operational excellence through clear designs, thoughtful documentation, and hands‑on mentorship.
Requirements
4+ years of software development experience delivering and operating production services.
Ownership of mission‑critical systems, including support for incident response and production troubleshooting.
Strong grasp of REST principles and API design; experience with service‑oriented/microservice architectures and distributed systems.
Practical expertise in IAM: designing authn/authz flows; token‑based auth (OAuth/JWT); SSO and MFA; secure session and policy/role management.
Hands‑on with identity platforms such as Auth0 and/or Okta, integrating identity with diverse applications and services.
Proficiency with modern stacks and tooling, e.g., Go, JavaScript, Terraform, and operational tooling for deploy/monitoring.
Data and systems fundamentals: modeling complex persisted data; performance tuning of code and database queries.
Familiarity with storage and messaging (e.g., Postgres, Redis, Kafka) and effective caching patterns.
Excellent written and verbal communication, with the ability to simplify complex ideas and produce clear design docs/runbooks.
Collaborative and mentoring mindset: generous with code reviews, eager to learn and to coach peers; results‑driven and pragmatic.
Passion for continual learning and building reliable, high‑performance, secure systems that enable our engineers and delight our users.
Benefits
Employees (and eligible family members) are covered by medical, dental, vision and more.
Employees may enroll in our company’s 401k plan.
Employees will also be eligible to receive discretionary vacation for exempt team members.
Paid holidays throughout the calendar year.
Paid sick leave.
Other compensation includes eligibility for an annual bonus and the potential for restricted stock units based on role.
Risk Analyst supporting Keyloop’s Security Governance by managing information security risks. Identifying and monitoring risks while ensuring compliance with regulatory standards.
Cloud Security Engineer responsible for designing and implementing security controls for cloud environments at Keyloop. Ensuring secure adoption and compliance while working with platform and engineering teams.
IT Infrastructure & Security Engineer managing and developing network and server infrastructure at L - mobile. Collaborating on security measures and supporting internal audits in a hybrid role.
Cyber Security Consultant to deliver Wanstor’s security offerings and improve customer Cyber Security and Data Security. Involves consulting, implementation, and oversight of security measures.
Senior Manager in IT - Strategieberatung for Defense & Security, developing client relationships and growth strategies. Leading IT transformation projects in security - critical organizations.
Information Security Expert overseeing ISMS development and IT security compliance in Germany. Collaborates with management and leads regulatory requirements implementation.
IT Professional responsible for implementing innovative industrial IT solutions. Working in an agile environment while ensuring IT and OT security for production networks.
Security Compliance Specialist enhancing cybersecurity and compliance framework at Trezor. Collaborating across teams to shape security and compliance operations in the tech sector.
Cyber Security Specialist focusing on IT security measures and infrastructure protection for a motivated team. Engaging in both project work and internal security processes.