Senior Software Engineer - Identity & Privileged Access Management

Details

Bloomberg’s Platform Security organization secures the infrastructure, systems, and data that power its global financial information network. The Identity & Privileged Access Management (PAM) team ensures that users, services, and systems securely access the resources they need across Bloomberg’s hybrid environment.

The team designs, builds, and scales foundational services for identity, authorization, and privileged access. These systems enforce least privilege, meet compliance requirements, and enable secure connectivity and automation at enterprise scale.

Responsibilities

• Design and build scalable identity and access control services operating across thousands of applications and systems.
• Solve problems involving authentication, authorization, and credential lifecycle management.
• Contribute to security automation by integrating IAM and PAM with cloud-native and on-premises systems.
• Design and implement high-performance, fault-tolerant services managing identities, roles, policies, and entitlements.
• Engineer automation for credentials, secrets, and privileged accounts across Linux, Windows, macOS, and cloud environments.
• Collaborate with Platform Security, Infrastructure Engineering, and Compliance teams to deliver robust, auditable solutions.
• Integrate open-source and vendor PAM technologies, including Teleport and CyberArk, with Bloomberg’s internal platforms.
• Drive adoption of modern security engineering and infrastructure-as-code practices.
• Lead architectural and design discussions, mentor junior engineers, and promote secure software development best practices.

Requirements

• 4+ years of hands-on software engineering experience; skill and impact are valued over years of experience.
• Strong programming skills in Python, Go, or Java.
• Deep understanding of authentication and authorization concepts, including OAuth2, SAML, OIDC, RBAC, and ABAC.
• Experience building distributed, highly available solutions targeting 99.9999% uptime.
• Solid understanding of Linux systems and networking fundamentals.
• Knowledge of infrastructure-as-code principles and tools such as Terraform and Ansible.
• Understanding of cryptographic principles related to secrets management, credential rotation, and secure remote access.
• Experience managing infrastructure at scale, with an emphasis on secure automation and privileged task execution.
• Familiarity with operating-system-level security controls such as sudo policies, SELinux, eBPF, and auditd.
• Experience integrating and securing homegrown and third-party systems within a PAM framework.
• Hands-on experience designing and operating privileged access management platforms in complex enterprise environments.
• Understanding of enterprise identity ecosystems and the role of privileged access in governance and compliance.

Benefits

The salary range is USD 160,000–240,000 annually, plus benefits and bonus. Benefits may include merit increases, incentive compensation for exempt roles, paid holidays, paid time off, medical, dental and vision coverage, short- and long-term disability benefits, a 401(k) match, life insurance, and wellness programs. Benefits are not provided directly to contingent workers, contractors, or interns.