# Staff Security Engineer, IAM

**Company**: GitLab
**Location**: Remote, Canada; Remote, United States
**Work arrangement**: remote
**Experience**: staff
**Job type**: full-time
**Salary**: $168,000-$238,000 USD
**Category**: Engineering
**Industry**: Technology

**Apply**: https://job-boards.greenhouse.io/gitlab/jobs/8761409002?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_e6c4af15-8df

## Description

GitLab is seeking a Staff Security Engineer, IAM to join its Corporate Security Identity Team. The successful candidate will be a senior technical leader and strategic anchor on the team, responsible for designing elegant solutions to complex identity challenges.

**About the Role** The Corporate Security Identity Team is on a mission to transform how the workforce ecosystem securely accesses the tools they need to do their best work. The Staff Security Engineer will be responsible for critical systems, write technical proposals that influence the roadmap, raise the bar through design and code review, and lead cross-functional initiatives that span Security, IT, Engineering, Compliance, and People teams.

**Key Responsibilities**

- Design comprehensive identity and AI access solutions that scale with business growth

- Replace low-code automation with engineered services, migrating existing iPaaS automation to Python services on GCP Cloud Run

- Codify identity platforms in Terraform/OpenTofu/Pulumi, leading the migration of Okta, Lumos, and NHI platform from click-ops to peer-reviewed infrastructure-as-code

- Help re-architect identity and access across GCP and AWS organizations

- Lead identity and access engineering for enterprise AI platforms

- Pioneer non-human identity governance by designing monitoring and management solutions for service accounts, API keys, certificates, AI agents, and MCP integrations

- Drive cross-functional initiatives with Security, IT, Engineering, Enterprise AI, and the Office of the CIO

- Mentor senior and intermediate engineers on technical implementation and strategic thinking

**Requirements**

- Extensive IAM experience designing and implementing enterprise-scale solutions

- Expert-level Okta expertise

- Strong infrastructure-as-code practice with Terraform/OpenTofu/Pulumi

- Proficiency writing and shipping Python as a software engineer

- Cloud identity depth in GCP and/or AWS

- Hands-on experience administering or governing enterprise AI platforms

- Experience with IGA platforms like Lumos, ConductorOne, or similar

- Experience in regulated environments with knowledge of compliance frameworks

**Nice to Have Qualifications**

- Passion for emerging identity challenges including AI agent governance, non-human identity management, zero-trust architecture, and behavioral analytics

- Experience carrying a cloud org restructuring through to completion

**Benefits**

- Benefits to support health, finances, and well-being

- Flexible Paid Time Off

- Team Member Resource Groups

- Equity Compensation & Employee Stock Purchase Plan

- Growth and Development Fund

- Parental Leave

## Skills

### Required
- IAM
- Okta
- Terraform
- Python
- GCP
- AWS
- Cloud Identity
- IGA

### Nice to have
- AI agent governance
- non-human identity management
- zero-trust architecture
- behavioral analytics

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/gitlab/jobs/8761409002?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)