Staff Security Engineer, IAM

GitLab
Canada, United States
Workplace: RemoteFull timeUSD 168,000 - 238,000 annuallyFunction: CybersecuritySkills: ["Technical leadership","Cross-functional collaboration","Strategic thinking","Mentorship","Code review"]

Lead GitLab’s Corporate Security Identity team to modernize how workforce ecosystems access tools, from foundational IAM controls to automated governance for AI and non-human identities. Design scalable conditional access, just-in-time privileged access, and peer-reviewed identity configuration. Replace click-ops with engineered Python services on GCP Cloud Run, codify identity platforms with Terraform/OpenTofu/Pulumi, and re-architect policies across GCP and AWS while mentoring engineers and driving cross-functional initiatives.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
GitLab
GitLab
4 days ago

Staff Security Engineer, IAM

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 8 hours agoStatus: Live

Job Summary

Lead GitLab’s Corporate Security Identity team to modernize how workforce ecosystems access tools, from foundational IAM controls to automated governance for AI and non-human identities. Design scalable conditional access, just-in-time privileged access, and peer-reviewed identity configuration. Replace click-ops with engineered Python services on GCP Cloud Run, codify identity platforms with Terraform/OpenTofu/Pulumi, and re-architect policies across GCP and AWS while mentoring engineers and driving cross-functional initiatives.
Location: Canada, United States
Workplace: Remote
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Design scalable identity and AI access solutions, including AI agent governance frameworks and privileged access workflows using just-in-time provisioning.
  • •Migrate click-ops/low-code automation to engineered services, including Python services on GCP Cloud Run with source control, tests, CI, and observability.
  • •Codify identity platforms using Terraform/OpenTofu/Pulumi and lead migrations (including Okta, Lumos, and NHI platform) toward peer-reviewed infrastructure-as-code.
  • •Re-architect identity and access across GCP and AWS organizations, including resource hierarchy, secure-by-default guardrails (org policies, SCPs, permission boundaries), and workload identity federation for least privilege.
  • •Lead identity and access engineering for enterprise AI platforms, pioneer non-human identity governance (service accounts, API keys, certificates), and operationalize governance across the SaaS estate while mentoring engineers.

Pay and Benefits

Salary: USD 168,000 - 238,000 annually
Perks:Paid LeaveEquityLearning BudgetParental Leave

Key Requirements

  • •Extensive IAM experience designing and implementing enterprise-scale solutions at a Staff or senior IC level.
  • •Expert Okta experience, including Identity Engine, advanced authentication policies, lifecycle workflows, and API automation.
  • •Strong infrastructure-as-code practice with Terraform/OpenTofu/Pulumi, including migrating click-ops to peer-reviewed code.
  • •Proficiency building and shipping Python services (modular, tested, code-reviewed) on GCP Cloud Run or similar serverless runtimes.
  • •Cloud identity depth in GCP and/or AWS, including resource hierarchy, IAM policy models, workload identity federation, and preventive controls (org policies, SCPs, permission boundaries).
Experience:DevSecOpsIAMAI securityRegulated environments
Skills:Technical leadershipCross-functional collaborationStrategic thinkingMentorshipCode review
Tech Stack:OktaIdentity EngineTerraformOpenTofuPulumiPythonGCPCloud RunAWSSSOSCIMAudit loggingAnthropic ClaudeClaude CodeOpenAI ChatGPT EnterpriseGoogle Gemini EnterpriseMCPLumosConductorOneFedRAMP

Company Brief

GitLab
Provides a single application for the complete DevSecOps lifecycle, offering source code management, CI/CD, security, and collaboration tools to help teams deliver software faster and more securely.
Industry: Developer Tools
Company Size: Enterprise (1,001+ employees)
Revenue: USD 250M to 500M
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: San Francisco, United States
Founded: 2011
WebsiteLinkedIn