Security Engineer, IAM

Sentry•San Francisco, CA

1d•$155,000 - $240,000

About The Position

The Security Team is responsible for securing all things Sentry: our customers, our code, and everything in between. We are a small but growing team with broad scope, high trust, and the autonomy to tackle hard security problems with creativity and an engineering mindset. We work at a company with a strong developer culture, building a product that millions of developers genuinely love and rely on. That context shapes everything about how we operate. As a Security Engineer focused on Identity, Access and Management (IAM), you'll work across domains to maintain and improve Sentry’s identity and access management practices. You’ll own and shape access control practices that keep Sentry productive and secure as we grow. You’ll partner closely with Infrastructure, IT, and Platform teams to offer employees efficient secure self-service workflows to enable productivity. You will work as a technical collaborator who makes the secure path the obvious one. In this role, you will Own and mature identity and access management infrastructure and tooling like SSO, MFA, directory services across corporate, development and production cloud environments. Continuously improve Sentry’s identity and access control practices with automation and self-service support for onboarding/offboarding, joiners/movers/leavers, access reviews, privileged access management, SaaS lifecycle management, and security incident response workflows. Champion and implement secure-by-design access principles like attribute and context aware grants, comprehensive logging, just-in-time (JIT) provisioning, least privilege, policy-as-code automation principles, and zero-trust. Secure our human and non-human identities: user accounts, service accounts, API keys, OAuth clients, agentic, and workload identities. You’ll thrive in this role if you Enjoy operating cross-functionally, building relationships, influencing with technical expertise, and shaping how builders get access to get things done across a fast-moving engineering organization. Get excited when something new lands on your desk, be it a new feature spec, an authentication bypass, a novel agentic architecture, an unfamiliar cloud primitive, or a bug class you haven't seen before. Love working in a developer-forward culture where your colleagues are builders who care deeply about code quality and customer satisfaction. Reach for automation first, you'd rather build a scalable, systematic solution to a security problem than solve it manually a hundred times. Thrive with real ownership, you prefer to build and drive work end-to-end, you're energized by the autonomy that comes with being on a small, high-trust team.

Requirements

3+ years of industry experience designing, building, securing workforce identity and access control systems for corporate, development, and large-scale distributed cloud systems
Proficiency in Python and other scripting languages, Terraform and infrastructure-as-code tools, and building integrations via APIs, SCIM and webhooks
Experience with a breadth of identity platforms IDP, IGA, PAM, CloudIAM, etc.
Familiarity with cloud (AWS, GCP, Azure), containerization and orchestration (Docker, Kubernetes), and securing CI/CD and source controls tools (Github, Gitlab)
A collaborative approach to problem solving paired with strong written and verbal communication

Nice To Haves

Degree in Computer Science or a related field, equivalent training, or professional experience

Responsibilities

Own and mature identity and access management infrastructure and tooling like SSO, MFA, directory services across corporate, development and production cloud environments.
Continuously improve Sentry’s identity and access control practices with automation and self-service support for onboarding/offboarding, joiners/movers/leavers, access reviews, privileged access management, SaaS lifecycle management, and security incident response workflows.
Champion and implement secure-by-design access principles like attribute and context aware grants, comprehensive logging, just-in-time (JIT) provisioning, least privilege, policy-as-code automation principles, and zero-trust.
Secure our human and non-human identities: user accounts, service accounts, API keys, OAuth clients, agentic, and workload identities.