Staff Security Engineer, IAM @GitLab

Overview

GitLab is seeking a Staff Security Engineer specializing in Identity and Access Management (IAM) to join the Corporate Security Identity Team. This remote role involves designing solutions to enhance secure access within the organization's workforce ecosystem.

Key Responsibilities

• Design comprehensive identity and AI access solutions that scale with business growth.
• Migrate existing low-code automation to engineered Python services on GCP Cloud Run.
• Codify identity platforms in Terraform/OpenTofu/Pulumi and lead migrations from click-ops to peer-reviewed infrastructure-as-code.
• Re-architect identity and access across GCP and AWS organizations, enabling secure access.
• Lead identity and access engineering for enterprise AI platforms, including administration and policy enforcement.
• Pioneer non-human identity governance for service accounts and AI agents.
• Drive cross-functional initiatives to translate ambiguous business needs into technical specifications.
• Mentor engineers on technical implementation and strategic thinking.

Requirements

• Extensive IAM experience with enterprise-scale solutions and a senior IC level role.
• Expert-level competency in Okta, including advanced authentication policies and lifecycle workflows.
• Strong experience with infrastructure-as-code tools like Terraform/OpenTofu/Pulumi.
• Proficient in writing Python code designed for deployment as services on serverless runtimes.
• Deep understanding of cloud identity management in GCP and/or AWS.
• Hands-on experience with enterprise AI platforms, with an understanding of AI-specific risks.
• Familiarity with IGA platforms and compliance frameworks within regulated environments.

Benefits

• Flexible Paid Time Off
• Health, financial, and well-being benefits
• Equity Compensation & Employee Stock Purchase Plan
• Growth and Development Fund
• Parental Leave

Location

Remote (eligible candidates from Canada and the United States)

How to Apply

Interested candidates should submit their applications through the provided application link.

Deadline

No specific deadline mentioned.