Senior Platform Security Engineer

Discord as a Senior Platform Security Engineer, where you'll focus on identity and access management, software development, and operational excellence. You'll own software engineering projects end-to-end, define identity for autonomous agents, build and evolve Discord's employee authorization platform, design and harden the Zero Trust architecture, and automate continuous permission right-sizing. You'll also consult on risk assessments, architectural designs, threat models, and code reviews.

Identifier les opportunités de réduction des risques de sécurité à travers l'ingénierie, puis concevoir et livrer des solutions techniques pour gérer les identités et les accès.

About Discord

Practices to discover industry tools and knowledge that can multiply your team's impact

Responsibilities

• Contribuer à la mission de Discord en utilisant votre expertise en sécurité, développement logiciel et excellence opérationnelle, en mettant particulièrement l'accent sur la gestion des identités et des accès.
• Posséder des projets d'ingénierie logicielle de bout en bout au sein d'une équipe autonome et intégrée horizontalement, en définissant ce que signifie l'identité pour les agents autonomes et d'autres acteurs non humains.

Requirements

• Experience building or operating identity and access management systems: authentication, authorization, or access control at scale
• 3+ years of experience writing software in a general-purpose programming language (we mainly use Python, TypeScript, and Rust)
• 3+ years of experience securing systems with millions of users
• 5+ years of experience building and operating production systems or infrastructure
• Experience building in and securing multi-cloud environments (e.g. GCP, Cloudflare, AWS)
• Experience designing and building software for customers (internal or external) beyond your immediate team
• Understanding of modern authentication and authorization concepts (e.g. RBAC, OAuth, OIDC, SSO, Zero Trust network architectures, mTLS, cloud IAM)
• Familiarity with build and CI/CD technologies (e.g. Terraform, Bazel, Buildkite)
• Provisioned or managed service and workload identity using PKI, including issuing and operating mTLS between services
• Experience with Zero Trust platforms such as Cloudflare Access and Teleport, for auditable access to apps, hosts, and internal systems
• Experience with secrets management systems (e.g. Vault, or a cloud KMS or secrets manager), including rotation and least-privilege access to secrets
• Developed and debugged distributed systems atop GCP, Cloudflare, and/or AWS
• Built or operated a service mesh (e.g. Envoy, Istio)
• Led complex migrations or risk management programs across an engineering organization
• Managed and secured VMs or bare-metal hosts (e.g. Linux, Salt)

Preferred

• Experience defining and orchestrating containers (e.g. via Kubernetes, Docker, Distroless, OCI)

Pay

USD 196,000 - 245,000

Benefits

• Enjoy a flexible work model, competitive compensation, health benefits, family support, generous PTO, wellness stipends, and opportunities to give back to your community.