Senior Software Engineer, Security Foundations (Networking Infrastructure Projects)

Lyft • San Francisco Bay Area, CA

1d • $148,000 - $185,000 • Hybrid

About The Position

We're looking for an engineer with a strong networking background who's excited about growing and securing distributed systems throughout the company. You'll play a part in shaping how service networking works at Lyft, with significant impact and visibility.

Requirements

• Solid experience with a high level programming language (bonus points for experience with Python, Go-lang and shell scripts)
• Strong understanding of networking concepts (TCP/IP, HTTP, TLS, DNS) and working experience with edge or sidecar proxies.
• Identity and Access Management (IAM): provisioning least privilege access to users and services.
• Familiarity with authn/authz and frameworks and concepts related to SSO, SAML, OAuth, OpenID.
• Experience with Amazon Web Services (AWS) or another major cloud service provider
• Kubernetes and container security and running fleets of endpoints or servers in the cloud.
• Cryptography, PKI, or key/certificate distribution
• Running multi-tier or distributed web services at scale
• When facing a problem that's poorly defined or outside of your expertise, you can quickly learn what you need to dig in, make sense of the problem, and start working towards a solution
• You're a great communicator, and can advocate for your proposals while also empathizing with your teammates' goals and priorities
• You understand that security work must be prioritized because all teams have finite resources. You have good judgment and a sense of when to compromise and when to hold your ground

Responsibilities

• Work on our network security initiative such as our Internet edge proxies (Envoy), Web Application Firewall, service-to-service authentication and authorization.
• Architect and build services that improve the security of our systems with an eye towards scalability and avoiding unnecessary friction.
• Evangelize our shared security responsibility model by collaborating with other Infrastructure teams at Lyft to ensure that our services and workflows are secure by default.
• Work on embedding security best practices such as least privilege, isolation, monitoring, authentication and authorization across our entire infrastructure (systems, application, networking).
• Develop critical services that Lyft depends on such as our credential management service that provides secrets to all our services at Lyft.

Benefits

• Great medical, dental, and vision insurance options with additional programs available when enrolled
• Mental health benefits
• Family building benefits
• Child care and pet benefits
• 401(k) plan to help save for your future
• In addition to 12 observed holidays, salaried team members have discretionary paid time off, hourly team members have 15 days paid time off
• 18 weeks of paid parental leave. Biological, adoptive, and foster parents are all eligible
• Subsidized commuter benefits
• Lyft Pink - Lyft team members get an exclusive opportunity to test new benefits of our Ridership Program

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed
• Number of Employees: 1,001-5,000 employees