Software Engineer, Platform Access (L2)

Twilio•,

105d•$116,960 - $171,900•Remote

About The Position

This position is an engineering role within Twilio’s Cloud Native Foundations Team, suited to an engineer focused on identity, governance, and automated access control across multi-cloud environments. Our team manages identity federation, least-privilege access, and automated provisioning for hundreds of accounts across Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP). As an L2 engineer, you will help design, build, and operate access controls and platform security tools at scale. You'll get hands-on with multi-cloud IAM, contribute to Terraform-based infrastructure automation, and write code to ensure secure, seamless developer access—using modern AI-assisted tooling to move faster and ramp up your skills.

Requirements

1–2+ years of professional software engineering or DevOps/Platform engineering experience, with practical exposure to multi-cloud environments, Identity & Access Management (IAM), or platform automation.
Practical experience with, or a strong desire to learn, AI-assisted development tools (e.g., Claude Code, GitHub Copilot) to help write code, automate testing, and support debugging workflows.
Practical experience or familiarity with Terraform, Harness, or similar IaC tools to manage cloud resources and access permissions programmatically.
Experience with cloud environments, including basic exposure to account management, IAM permissions, or core services in at least one major provider—AWS (e.g., IAM, Organizations, SSO/Identity Center), Microsoft Azure (e.g., Microsoft Entra ID/Azure AD, RBAC, Subscriptions), or Google Cloud Platform (GCP) (e.g., Cloud IAM, Workload Identity, Projects).
Working knowledge of at least one of Shell, Terraform, YAML, or Go (Golang), with a willingness to build proficiency across the rest.
Solid understanding of core security concepts (authentication, authorization, least-privilege principles, secrets management) and an eagerness to build self-service, developer-friendly platform tooling.

Nice To Haves

Familiarity with centralized identity federation, SAML, OIDC, or Okta integration with cloud service providers.
Hands-on experience with containerized workloads (Docker, Kubernetes) or managing access to Kubernetes clusters (EKS/AKS/GKE RBAC).
Interest in automated cloud governance tools, account vending machines, or identity lifecycle management at scale.
Coursework or personal projects involving distributed systems, cloud security, or API development.
Enthusiasm for working across multi-cloud environments and expanding hands-on depth across AWS, Azure, and GCP over time.
General familiarity with multi-account/multi-project cloud architecture is a plus.

Responsibilities

Help design, build, and operate automations and access tools that streamline developer workflows while keeping multi-cloud environments secure.
Work with security and technical leadership to turn well-scoped tasks into working code.
Participate in code reviews and follow established patterns, testing standards and policy-as-code frameworks across the platform.
Support multi-cloud access infrastructure spanning AWS, Azure, and GCP accounts using Infrastructure as Code (Terraform).
Help maintain least-privilege IAM policies, identity federation, role provisioning, and automated lifecycle workflows across hundreds of cloud accounts.
Help maintain observability coverage, including metrics, alerts, and basic distributed tracing, across core data pipelines.
Build awareness of secure architectural practices and IAM best practices.
Flag access drift, technical debt, security vulnerabilities, and platform issues to your team as you encounter them.
Actively seek feedback and mentorship from senior engineers, participate in sprint planning, and share what you learn with peers as you grow into a more senior role.