Staff Security Engineer, Identity Access Management
About The Position
Snap Inc. is seeking a Staff Security Engineer to serve as the technical lead for SnapIAM, its identity and access management platform. SnapIAM centralizes identity and access policy management across cloud environments and services. The role sets technical direction and delivers secure, reliable, and usable access capabilities for Snap’s engineering teams. The engineer will establish SnapIAM’s technical strategy and multi-year roadmap; lead the design, implementation, and operation of services that manage identities, policies, and permissions; and drive cloud access management, workload and service identities, and access governance. The role leads complex initiatives from design through rollout, migration, and operations, working across Infrastructure, Engineering, and Security teams to improve integration and adoption while balancing least privilege with developer productivity. The position also defines architecture and engineering and operational standards, contributes production-quality code, leads design and code reviews, and mentors engineers. It calls for sound architectural judgment, strong distributed-systems and IAM expertise, and effective collaboration across teams. Snap follows a “default together” approach, expecting team members to work in an office four or more days per week.
Requirements
- Bachelor’s degree in a related technical field such as computer science or engineering, or equivalent practical work experience.
- At least 9 years of post-bachelor’s industry experience; or a Master’s degree in a technical field and at least 8 years of post-graduate security or software engineering experience; or a PhD in a related technical field and at least 5 years of post-graduate security or software engineering experience.
- At least 1 year of experience providing technical leadership or acting as a domain expert for an engineering organization.
- Experience designing and implementing identity and access management systems, cloud access controls, or security platforms.
- Experience architecting, designing, and developing distributed systems.
- Deep knowledge of identity and access management, including authentication, authorization, access policy design, and least-privilege controls.
- Strong software engineering fundamentals and experience designing, building, and operating distributed systems.
- Experience designing and implementing cloud security or identity systems, including access controls and policy management.
- Ability to establish technical strategy, make sound architectural tradeoffs, and deliver multi-quarter platform initiatives.
- Ability to influence technical decisions and align partner teams across organizational boundaries.
- Strong written and verbal communication skills, including explaining complex technical decisions to engineering and security partners.
- Experience maintaining high standards for code quality, testing, reliability, and operational readiness.
Nice To Haves
- Experience with cloud identity and access management across GCP and AWS.
- Experience with workload or service identity, access governance, or identity lifecycle management.
- Experience leading migrations from legacy access-management systems to centralized platforms.
- Experience building automation and self-service workflows that improve access security and developer experience.
- Experience setting technical direction and delivering platform roadmaps across multiple engineering teams.
Responsibilities
- Set SnapIAM’s technical strategy and multi-year roadmap, translating company-wide identity and access needs into scalable platform capabilities.
- Lead the design, implementation, and operation of SnapIAM services for managing identities, access policies, and permissions across cloud platforms and services.
- Drive secure, reliable, and maintainable solutions for cloud access management, workload and service identities, and access governance.
- Lead complex, multi-team initiatives from technical design through rollout, migration, and ongoing operations; identify dependencies and resolve technical blockers.
- Partner with Infrastructure, Engineering, and Security teams to integrate SnapIAM, improve adoption, and balance least-privilege access with developer productivity and usability.
- Define architecture, engineering standards, and operational practices that improve reliability, observability, and safe change management.
- Contribute production-quality code, lead design and code reviews, and mentor engineers.
- Use AI-enabled engineering tools where appropriate to improve velocity and quality, applying sound judgment and human review.
Benefits
- Paid parental leave.
- Comprehensive medical coverage.
- Emotional and mental health support programs.
- Compensation packages that allow employees to share in Snap’s long-term success.
- Equity in the form of RSUs.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
