RemoteLeaf Logo
Log in Sign up

Staff Security Engineer, IAM

3 months, 4 weeks ago
United States
Full-time
Lead
Security Engineer
Cybersecurity
AWS CI/CD GCP Generative AI Go Machine Learning Microservices OAuth OpenID Connect Python SAML
Apply Now
Coinbase

Coinbase

Coinbase provides a user-friendly platform for buying and selling digital currencies, such as Bitcoin and Ethereum, catering to individuals, businesses, and developers in the cryptocurrency market.

Capital Markets
1K-5K
Founded 2012
View All Jobs 80

Description

  • Lead the architectural vision and security engineering execution for Coinbase’s IAM and workforce security platforms across multi-cloud, SaaS, and internal applications.
  • Evaluate, design, and implement build-buy-hybrid strategies for workforce Identity Governance and Administration, including automation with middleware and AI models.
  • Write code to build scalable automation, custom integrations, and self-service guardrails for identity controls in enterprise workflows and CI/CD pipelines.
  • Conduct threat modeling and security architecture reviews for foundational identity systems and critical SaaS integrations.
  • Partner with Engineering, IT, HR, AI/ML, and Product teams to align security initiatives with business goals and workforce enablement.
  • Serve as the DRI for complex cross-team security initiatives and drive delivery across multiple stakeholders.
  • Mentor junior and mid-level engineers and influence senior leadership on risk tradeoffs and workforce security strategy.
  • Use automated threat intelligence and AI-assisted analysis to identify attack vectors and design mitigations.

Requirements

  • 7+ years of experience in software engineering, security engineering, or systems architecture with a Staff-level focus on IAM and enterprise workforce security.
  • Proficiency in at least one programming language, such as Python or Go.
  • Ability to effectively leverage AI-assisted development tools to build tooling, automate workflows, and accelerate code review.
  • Experience implementing complex hybrid IAM infrastructures with large third-party SaaS footprints and internally developed microservices.
  • Deep understanding of IGA processes, including automated provisioning/deprovisioning, continuous access reviews, and privileged access management.
  • Extensive expertise in identity protocols and standards such as SAML, OAuth2, OIDC, and SCIM.
  • Experience with cloud IAM in AWS and GCP.
  • Strong knowledge of dynamic access control frameworks such as RBAC, ABAC, and ReBAC.
  • Background in applied risk management, automated threat modeling, and zero-trust architecture for distributed systems.
  • Ability to navigate ambiguity, drive alignment without direct authority, and communicate technical risk to business stakeholders.
  • Experience influencing outcomes across decentralized or federated organizations.
  • Experience responsibly using generative AI tools and copilots such as LibreChat, Gemini, or Glean in daily workflows.
  • Preferred: experience in hyper-growth tech, FinTech, or crypto environments with regulatory requirements such as SOX.
  • Preferred: experience governing non-FTE workforce populations such as contractors, BPO, and M&A integrations at scale.
  • Preferred: hands-on experience with Policy-as-Code tools like Open Policy Agent and machine learning for policy generation or anomaly detection.
  • Preferred: experience securing AI/ML workloads, including access to large language models, training data pipelines, and inference infrastructure.

Benefits

  • Annual base salary range of $218,025 to $256,500 USD, excluding equity and bonus.
  • Total compensation may also include equity and bonus eligibility.
  • Medical, dental, and vision coverage.
  • 401(k) benefits.
  • Remote-first roles are available, though in-person participation is required throughout the year.
  • Team and company-wide offsites are held multiple times annually and are fully supported.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

GuidePoint Security

Microsoft Security Engineer- Remote (Anywhere in the U.S.)

GuidePoint Security 251-1K Internet Software & Services

GuidePoint Security is seeking a Microsoft Cloud Security Engineer to deliver hands-on identity, data protection, and endpoint security engagements for clients across small businesses and large enterprises.

United States Full-time Mid Level Security Engineer
Active Directory Azure Network Security OpenID Connect Power BI PowerShell SAML SIEM
14 hours, 24 minutes ago
First Due

Cloud Security Software Engineer

First Due 51-250 Internet Software & Services

First Due is hiring a Cloud Security Software Engineer to build autonomous AI tools and agent-driven workflows for its cloud security plane supporting fire and EMS software operations.

United States Full-time Entry Level Security Engineer Software Engineer
$115k-$115k
Ansible AWS Go OWASP Python SIEM SOC Terraform TypeScript
14 hours, 54 minutes ago
Unlimited Technology

Lead Traveling Security Technician

Unlimited Technology 51-250 Professional Services

Unlimited Technology is hiring a Traveling Security Technician for UT Government to install, service, test, and inspect access control and IP camera systems for customers across the U.S.

United States Full-time Lead Security Engineer
$65k-$90k
1 day, 14 hours ago
True Zero Technologies

Identity Management Engineer / Architect (R-00197)

True Zero Technologies 11-50 Internet Software & Services

True Zero Technologies is seeking an Identity Management Engineer / Architect to design and operate a secure enterprise identity platform across on-premises, cloud, SaaS, and hybrid environments in support of Zero Trust and regulated government use cases.

Anywhere Full-time Senior Cloud Engineer Security Engineer
Active Directory Cybersecurity DevSecOps OAuth OpenID Connect PowerShell Python SAML Terraform
1 day, 14 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers