Senior/Staff Security Engineer, Zero Trust & IAM

Details

Are you prepared to join the X team and help build the ultimate real-time information-sharing app, revolutionizing how people connect? At X, we’re on a mission to become the trusted global digital public square, committed to protecting freedom of speech and building the future unlimited interactivity. Our goal is to empower every user to freely create and share ideas, fostering open public discourse without barriers. Join us in shaping this thrilling journey where your contribution will be invaluable to our success!

Who We Are:

X serves our community of users and customers by working tirelessly to preserve free expression and choice, create limitless interactivity, and create a marketplace that enables the economic success of all its participants.

What You’ll Do:

You will be responsible for driving the strategy and implementation for X Corp’s Zero Trust initiative to solve security problems, reduce risk, and keep X Corp’s internal systems and employees safe and secure. This includes practical application of Zero Trust principles across X’s suite of corporate systems, with a focus on access management.

In this role, you will:

• Own the development and refinement of X’s Zero Trust strategy.
• Own the design and implementation of Zero Trust remote access solutions to enable all X employees to do their job reliably and securely.
• Help grow and develop a group of Zero Trust focused engineers.
• Lead the cross-functional design and implementation of a holistic IAM framework that applies Zero Trust principles, leveraging signals from multiple platforms (Okta, Cloudflare, MDM, Uptycs, GSuite) to standardize access policies across all employee use cases.
• Partner with appropriate stakeholders to develop a framework to classify applications and services based on risk, data types and use cases.
• Build health working relationships with partner teams to ensure alignment and progress towards Zero Trust goals.
• Advocate and evangelize for Zero Trust with stakeholders throughout X.

Who You Are:

You care about security and building a secure environment for the people using X every day. You are curious, comfortable digging into the details, have experience with the tools of the trade, and are eager to help others protect our systems. Ideally, you have many of the following (but need not have all):

• 5 or more years of relevant experience in information security.
• Expert level knowledge of Zero Trust/BeyondCorp and related security models.
• Experience translating security models into an actionable strategy that solves key security problems and increases overall security posture in a large organization.
• Strong understanding of data management and classification.
• Background in IAM/Authn/Authz systems.
• Experience with networking concepts such as:
  • Routing Protocols (e.g. BGP/OSPF/IS-IS)
  • Load Balancing
  • Stateless and Stateful ACLs
  • DNS
• Experience implementing CloudFlare Zero Trust Network Access model.
• Fundamental understanding of Web applications including AJAX/JSON/CORS/CORB.
• Experience with Infrastructure as Code, Puppet, Terraform.
• Working knowledge of Go, Python.