Staff Security Engineer, Identity Access Management

Location: Bellevue, Los Angeles, Palo Alto, or San Diego; expected to work in an office 4+ days per week under hirify.global's “default together” policy.

Base salary: $213,000–$377,000 annually depending on U.S. pay zone; eligible for RSU equity.

Company

hirify.global is a technology company operating hirify.globalchat, Specs Inc., Bitmoji, Saturn, and other digital services, with security teams protecting global products, systems, and data.

What you will do

• Set hirify.globalIAM's technical strategy and multi-year roadmap for centralized identity and access capabilities.
• Design, implement, and operate services managing identities, access policies, and permissions across cloud platforms and services.
• Lead initiatives covering cloud access management, workload and service identities, access governance, migrations, rollout, and ongoing operations.
• Partner with Infrastructure, Engineering, and Security teams to improve adoption while balancing least-privilege access with developer productivity and usability.
• Define architecture, engineering standards, observability, reliability, and safe change-management practices.
• Contribute production-quality code, lead design and code reviews, mentor engineers, and use AI-enabled engineering tools with human review where appropriate.

Requirements

• Relevant bachelor's degree or equivalent practical work experience.
• 9+ years of post-bachelor's industry experience; or a technical master's degree with 8+ years of post-graduate security or software engineering experience; or a related PhD with 5+ years of post-graduate security or software engineering experience.
• At least 1 year of technical leadership or domain-expert experience for an engineering organization.
• Experience designing and implementing identity and access management systems, cloud access controls, or security platforms.
• Experience architecting, designing, developing, and operating distributed systems.
• Deep knowledge of authentication, authorization, access policy design, and least-privilege controls.
• Strong software engineering fundamentals and standards for code quality, testing, reliability, and operational readiness.
• Ability to establish technical strategy, make architectural tradeoffs, deliver multi-quarter initiatives, influence decisions, align partner teams, and communicate complex technical decisions clearly.

Nice to have

• Cloud identity and access management experience across GCP and AWS.
• Experience with workload or service identity, access governance, or identity lifecycle management.
• Experience leading migrations from legacy access-management systems to centralized platforms.
• Experience building automation and self-service workflows that improve access security and developer experience.
• Experience setting technical direction and delivering platform roadmaps across multiple engineering teams.

Culture & Benefits

• Default-together working model with in-office collaboration expected 4+ days per week.
• Paid parental leave, comprehensive medical coverage, and emotional and mental health support programs.
• Compensation packages include long-term-success participation through RSU equity.
• Equal opportunity employment with consideration for qualified applicants with criminal histories in accordance with applicable law.