Staff, Security Engineer (Authentication & Access)

Location: Seoul, South Korea

Company

hirify.global is a large global public commerce company with a startup culture, building high-tech services that simplify shopping, eating, and everyday life in South Korean commerce.

What you will do

• Design and implement security architectures for enterprise platforms, services, and large-scale distributed systems.
• Partner with software engineering, infrastructure, and platform teams to integrate security requirements throughout system design and development.
• Develop IAM, authentication, authorization, credential management, cryptography, and data protection solutions.
• Design and improve authentication and authorization services using OAuth 2.0, OIDC, and federation technologies.
• Build security controls, tooling, services, prototypes, and automation primarily with Python, emphasizing scalability, reliability, and operational efficiency.
• Review architectures, identify security gaps and technical risks, and promote secure design, secrets management, access governance, and stronger security operations.

Requirements

• Bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity, or a related technical field.
• 10+ years of experience in security engineering, security architecture, platform engineering, software engineering, or related technical disciplines.
• Strong expertise in one or more of IAM; authentication and authorization; OAuth 2.0, OIDC, and federation; applied cryptography and key management; credential and secrets management; PKI; or security policy and access-control frameworks.
• Strong understanding of secure architecture principles for cloud-native and distributed systems.
• Hands-on software development experience with Python and security automation.
• Experience designing, implementing, or supporting enterprise security platforms and services.
• Ability to analyze complex technical problems and deliver practical, scalable solutions.
• Strong written and verbal communication skills and the ability to collaborate across engineering organizations.

Nice to have

• Experience with enterprise-scale IAM, identity governance, access management, or Zero Trust solutions.
• Experience designing security architectures for AWS, GCP, or Azure.
• Knowledge of secrets management, credential lifecycle management, and privileged access management.
• Experience with PKI design, certificate management, or cryptographic service platforms.
• Experience developing security platforms, internal developer tooling, or security automation frameworks.
• Understanding of threat modeling, security monitoring, intrusion detection, or incident response.
• Experience in large-scale technology companies or rapidly growing engineering organizations.
• CISSP, CCSP, ISSAP, SABSA, TOGAF, or equivalent certification.
• Experience contributing to security standards, architectural reviews, or security-by-design initiatives.

Culture & Benefits

• Startup culture combined with the resources of a large global public company.
• Opportunity to contribute hands-on to new initiatives, innovations, and the future of commerce.
• Equal opportunity workplace with non-discrimination protections for disabled applicants and applicants with veteran status.

Hiring process

• Application review, job fit interview, focus interview, and offer.
• The process may vary according to the role, scheduling, or other circumstances; interview schedules and results are communicated by email.
• The posting may close early if all openings are filled, and an offer may be rescinded if submitted application information is false.