Software Engineer (Infrastructure Security)

Join WorkOS, a platform engineering team with a security mission. As a Software Engineer (Infrastructure Security), you will build workload identity infrastructure, bring identity-based authentication to internal services, eliminate static secrets, and unify authorization. You will have the opportunity to make a significant impact on the security of our applications and enjoy a range of benefits, including health insurance, retirement savings, paid vacation, and wellness stipends.

About WorkOS

• A pragmatic migrator. You know that shipping the primitive is half the job. You can drive adoption across many teams, meet them where they are, and retire the legacy path
• Curious and humble. You ask the basic questions, enjoy untangling complex systems, and bring others along with you
• Excited about AI. You're embracing AI and automation to scale platform work and reduce toil
• A strong partner to engineering. You build trust with engineers by understanding their priorities and making security frictionless
• A platform builder. You love building infrastructure that other engineers rely on every day, and you sweat the developer experience details that make adoption effortless

Responsibilities

• Construire une infrastructure d'identité de charge de travail et faire des identifiants d'identité à durée limitée une partie intégrante de l'environnement d'exécution de chaque application.
• Apporter une authentification basée sur l'identité aux services internes et travailler avec les propriétaires des principales dépendances internes pour soutenir les certificats d'identité.
• Remplacer tous les mots de passe statiques et les jetons de service par des identifiants d'identité à durée limitée, et construire des proxys de sortie authentifiés par l'identité.

Requirements

• Fluent in service-to-service auth. You know authentication and authorization deeply: JWTs, X.509 certificates, and when to reach for each
• A systems thinker. You reason carefully about bootstrapping, circular dependencies, availability, and failure modes, especially for infrastructure that everything else depends on
• Proven ability to drive cross-team adoption of platform capabilities or lead large-scale migrations
• Experience building and operating production infrastructure that other teams depend on, with attention to availability and failure modes
• 5+ years of experience in software engineering, with a focus on security-related platform, infrastructure, or distributed systems
• Strong working knowledge of secrets management, fine-grained authorization, and workload identity systems
• Familiarity with the Kubernetes ecosystem and authentication/authorization technologies such as JWTs, X.509 certificates, PKI, cert-manager, SPIFFE/SPIRE, and OPA

Pay

USD 175,000 - 275,000