Software Engineer II, Security Engineering (Auth0)

Okta•Toronto, ON

9d•CA$110,000 - CA$151,800•Hybrid

About The Position

We are looking for a Software Engineer II to join the Auth0 Security Engineering organization. You'll help build and maintain the security guardrails for our multi-cloud environment, implementing security and compliance standards as programmatic, code-driven policies.

Requirements

3+ years of experience in software engineering or information security, with hands-on exposure to cloud-native environments, Kubernetes (EKS, AKS), and cloud security concepts.
Experience building or maintaining automated controls and infrastructure-as-code, ideally within Terraform workflows.
An eagerness to identify attack vectors and think through risk in distributed systems, with a willingness to learn formal risk assessment practices.
Familiarity with security or cloud tooling, and an interest in applying AI to streamline security tasks and governance.
Strong communication skills and the ability to collaborate effectively across teams.
A Bachelor's degree in Computer Science, Information Security, Systems Engineering, or a related field, or equivalent practical experience.

Nice To Haves

Exposure to compliance frameworks such as SOC2, or HIPAA in a cloud environment.
Proficiency in one or more languages used for automation and tooling, such as Python, Go, or JavaScript.
Experience creating, managing, or securing containerized environments.
Familiarity with service mesh (Istio) security policies and zero-trust networking concepts.

Responsibilities

Implement and maintain organization-wide controls (SCPs, Azure Policy) balancing protection with developer experience.
Build and update templates and permission boundaries that govern how services and humans interact with our cloud, applying the principle of least privilege.
Contribute to the security standards for VPC architecture, edge networking, and cross-account connectivity.
Help build systems and processes that validate the security posture of the platform, enforcing our security policies and surfacing actionable feedback for engineering teams.
Partner with teammates across the organization, share what you learn, and continually deepen your security expertise.