Product Security Senior IAM Software Engineer

About the role

The Product Security team builds security protections for vehicles and supporting infrastructure. As a Senior IAM Engineer you will own core components of the identity and authorization platform used by vehicles, cloud services, and internal teams.

Key responsibilities

• Design, build, and operate security‑critical identity and authorization services (OAuth2/OIDC provider, ACL service, workload identity, key distribution) in Go on Kubernetes/AWS.
• Own the authorization data model, evolve the SpiceDB schema, and provide APIs, SDKs, and tooling for permission management.
• Partner with PKI teams to adopt mTLS and SPIFFE/SPIRE for authentication and guide integration with SpiceDB.
• Participate in incident response, on‑call duties, and vulnerability mitigation.

Required profile

• Bachelor’s degree in Computer Science, Engineering or equivalent experience.
• 5+ years building and operating production backend services.
• Proven ability to work cross‑functionally with heterogeneous engineering teams.
• Experience delivering platform capabilities from planning through production.

Required skills

• Strong Go programming, gRPC/REST services, protobuf/API design.
• Modern identity and authorization: OAuth2/OIDC, JWT, mTLS, fine‑grained authorization (SpiceDB/Zanzibar, OPA).
• Production experience on Kubernetes and AWS (EKS, Helm, ArgoCD, IAM, KMS, VPC).
• SQL datastores such as PostgreSQL or CockroachDB.

What we offer

• Competitive base salary and performance bonus eligibility.
• Equity participation through Restricted Stock Units.
• Comprehensive benefits package including health coverage, retirement savings, paid time off and family planning programs.