Staff Security Engineer, Identity Access Management

Snap•Santa Monica, CA

2d•Onsite

About The Position

Snap Inc. is seeking a Staff Security Engineer to serve as the technical lead for SnapIAM, its centralized identity and access management platform. The role sets technical direction and delivers secure, reliable, and usable access capabilities for Snap’s engineering teams, managing identities and access policies across cloud environments and services. The engineer will set SnapIAM’s technical strategy and multi-year roadmap; lead the design, implementation, and operation of its services; and guide complex, cross-team initiatives through design, rollout, migration, and ongoing operations. The role partners with Infrastructure, Engineering, and Security teams to support adoption while balancing least-privilege access with developer productivity. It also establishes architecture, engineering standards, and operational practices; contributes production-quality code and reviews; mentors engineers; and uses AI-enabled engineering tools where appropriate, with human review. Snap follows a “default together” approach and expects team members to work in an office four or more days per week. The position is eligible for equity in the form of RSUs. U.S. base salary ranges are $251,000–$377,000 in Zone A (CA, WA, NYC), $238,000–$358,000 in Zone B, and $213,000–$320,000 in Zone C. Starting pay depends on job-related skills, experience, qualifications, work location, and market conditions.

Requirements

Deep knowledge of identity and access management, including authentication, authorization, access policy design, and least-privilege controls.
Strong software engineering fundamentals and experience designing, building, and operating distributed systems.
Experience designing and implementing cloud security or identity systems, including access controls and policy management.
Ability to establish technical strategy, make sound architectural tradeoffs, and deliver multi-quarter platform initiatives.
Ability to influence technical decisions and align partner teams across organizational boundaries.
Strong written and verbal communication skills, including the ability to explain complex technical decisions to engineering and security partners.
Experience maintaining high standards for code quality, testing, reliability, and operational readiness.
Bachelor’s degree in a related technical field such as computer science or engineering, or equivalent practical work experience.
At least 9 years of post-bachelor’s industry experience; or a master’s degree in a technical field and at least 8 years of post-graduate security or software engineering experience; or a PhD in a related technical field and at least 5 years of post-graduate security or software engineering experience.
At least 1 year of experience providing technical leadership or acting as a domain expert for an engineering organization.
Experience designing and implementing identity and access management systems, cloud access controls, or security platforms.
Experience architecting, designing, and developing distributed systems.

Nice To Haves

Experience with cloud identity and access management across GCP and AWS.
Experience with workload or service identity, access governance, or identity lifecycle management.
Experience leading migrations from legacy access-management systems to centralized platforms.
Experience building automation and self-service workflows that improve access security and developer experience.
Experience setting technical direction and delivering platform roadmaps across multiple engineering teams.

Responsibilities

Set the technical strategy and multi-year roadmap for SnapIAM, translating company-wide identity and access needs into scalable platform capabilities.
Lead the design, implementation, and operation of SnapIAM services that manage identities, access policies, and permissions across cloud platforms and services.
Drive secure, reliable, and maintainable solutions for cloud access management, workload and service identities, and access governance.
Lead complex, multi-team initiatives from technical design through rollout, migration, and ongoing operations; identify dependencies and resolve technical blockers.
Partner with Infrastructure, Engineering, and Security teams to integrate SnapIAM, improve adoption, and balance least-privilege access with developer productivity and usability.
Define architecture, engineering standards, and operational practices that improve system reliability, observability, and safe change management.
Contribute production-quality code, lead design and code reviews, and mentor engineers to strengthen technical execution and team ownership.
Use AI-enabled engineering tools where appropriate to improve engineering velocity and quality, applying sound judgment and human review to generated work.