search Browse Jobs
Staff Security Engineer, IAMGitLab · Remote, Canada; Remote, United States
GitLab logo

GitLab

company page ↗

Staff Security Engineer, IAM

🗓️ Posted 2026-08-31 Remote, Canada; Remote, United States Hybrid Human Resources Recruitment
💰 Salary Not shared 📊 Market 10,833 CAD–16,667 CAD/mo

About the Company

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100 trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. Fortune 500 is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. The Corporate Security Identity Team is on a mission to transform how our workforce ecosystem securely accesses the tools they need to do their best work, advancing from foundational controls to sophisticated, automated governance across our identity platforms and our emerging AI tooling. As a Staff Security Engineer, you'll be a senior technical leader and strategic anchor on the team. You're passionate about designing elegant solutions to complex identity challenges, whether that's architecting enterprise-scale conditional access policies, codifying our configuration of our identity platforms, or building governance frameworks f

Requirements

  • ● Extensive IAM experience designing and implementing enterprise-scale solutions, with demonstrated time at a Staff or senior IC level
  • ● Expert-level Okta expertise including Identity Engine, advanced authentication policies, lifecycle workflows, and API automation
  • ● Strong infrastructure-as-code practice with Terraform/OpenTofu/Pulumi , including provider experience for SaaS identity platforms and a track record of migrating click-ops to code
  • ● Proficiency writing and shipping Python as a software engineer designed as modular, tested, code-reviewed, deployed as services (GCP Cloud Run or equivalent serverless runtime) and instrumented for failure
  • ● Cloud identity depth in GCP and/or AWS , including resource hierarchy and organization design, IAM policy models, workload identity federation, and preventive controls such as org policies, SCPs, and permission boundaries
  • ● Hands-on experience administering or governing enterprise AI platforms (Anthropic Claude preferred; OpenAI ChatGPT Enterprise, Google Gemini Enterprise, or similar acceptable), and awareness of AI-specific risks including prompt injection, MCP attack surface, agent identity, and data leakage
  • ● A working practice of building with AI tooling you use agentic tools (Claude Code, Cursor, or similar) in your daily engineering work, iterate on your own workflows as capabilities shift, and can bring the rest of the team along. The tooling landscape changes monthly and identity is at the center of it; we want someone whose instincts stay current because they're a practitioner
  • ● Experience with IGA platforms like Lumos, ConductorOne, or similar, with a preference for managing them declaratively
  • ● Experience in regulated environments with knowledge of compliance frameworks (FedRAMP, SOC2, SOX), including change management, evidence collection, and audit support
  • ● Passion for emerging identity challenges including AI agent governance, non-human identity management, zero-trust architecture, and behavioral analytics
  • ● Experience carrying a cloud org restructuring through to completion , including the migration and stakeholder work, not just the target-state design
  • ● Benefits to support your health, finances, and well-being
  • ● Flexible Paid Time Off
  • ● Team Member Resource Groups
  • ● Equity Compensation & Employee Stock Purchase Plan
  • ● Growth and Development Fund
  • ● Parental Leave