Senior Software Engineer - Identity & Privileged Access Management

Bloomberg•New York, NY

8h•$160,000 - $240,000

About The Position

Join Bloomberg’s Platform Security organization on the Identity & Privileged Access Management (PAM) team. The team secures the infrastructure, systems, and data powering Bloomberg’s global financial information network, ensuring users, services, and systems can access only the resources they need. It designs, builds, and scales services governing identity, authorization, and privileged access across Bloomberg’s hybrid environment. In this role, you will help modernize Bloomberg’s identity platform and privileged access ecosystem. You will build scalable access-control services, address authentication, authorization, and credential-lifecycle challenges, and advance security automation by integrating IAM and PAM with cloud-native and on-premises systems. The work involves technologies and approaches such as OAuth2, OIDC, secrets management, certificate automation, and just-in-time access.

Requirements

At least 4 years of hands-on software engineering experience; skill and impact are valued more than years.
Strong programming skills in Python, Go, or Java.
Deep understanding of authentication and authorization concepts, including OAuth2, SAML, OIDC, RBAC, and ABAC.
Experience building distributed, highly available solutions targeting 99.9999% uptime.
Solid understanding of Linux systems and networking fundamentals.
Knowledge of infrastructure-as-code principles, such as Terraform and Ansible.

Nice To Haves

Solid understanding of cryptographic principles related to secrets management, credential rotation, and secure remote access.
Experience managing infrastructure at scale, with an emphasis on secure automation and privileged task execution.
Familiarity with operating-system-level security controls for enforcing access restrictions, such as sudo policies, SELinux, eBPF, and auditd.
Experience integrating and securing homegrown and third-party systems within a PAM framework.
Hands-on experience designing and operating privileged access management platforms in complex enterprise environments.
Understanding of enterprise identity ecosystems and how privileged access fits into broader governance and compliance initiatives.

Responsibilities

Design and implement high-performance, fault-tolerant services for managing identities, roles, policies, and entitlements.
Engineer automation for managing credentials, secrets, and privileged accounts across Linux, Windows, macOS, and cloud environments.
Collaborate with Platform Security, Infrastructure Engineering, and Compliance teams to deliver robust, auditable solutions.
Integrate open-source and vendor PAM technologies, such as Teleport and CyberArk, with Bloomberg’s internal platforms.
Drive adoption of modern security engineering and infrastructure-as-code practices.
Lead architectural and design discussions, mentor junior engineers, and champion secure software development best practices.