Sr. Security Software Engineer - Internal Identity & Access Management

The Internal Identity & Access Management (I2AM) team is responsible for critical production infrastructure that provides a foundational notion of Identity and strong authentication and authorization controls across Pinterest. Our backend is primarily written in Golang, Python with some C++ while our frontend tools are written in React and TypeScript. We’re looking for an experienced software engineer who will help us build robust tooling to define and evaluate access controls across production infrastructure. A security background is not necessary but ideal candidates will have familiarity with the problems or related spaces, such as Infrastructure or Identity.

What you'll do:

• Help shape our identity and authorization controls for users, services and AI Agents.

• Design, implement, and maintain mission-critical software that will help us deliver robust IAM infrastructure and libraries to our customers.

• Collaborate with a variety of teams to build performant and resilient AAA (Authentication, Authorization, Auditing) platform controls into various high-traffic services including our AI Agents, online/offline data platforms, databases, service mesh (Envoy). and other critical infrastructure components.

• Represent the I2AM team across the Security Organization and with our X-org partners, including Networking, Data Platform, Cloud Platform, Agent Platform and product teams.

• Work with and mentor more junior engineers on the I2AM team.

What we’re looking for:

• Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent experience.

• 5+ years of software development experience.

• A history of building & operating large scale distributed systems.

• Past experience influencing technical architecture and roadmap adoption while working across other teams.

• Experience in some of the following areas is a strong plus:

  • Infrastructure provisioning tools (Terraform, Puppet, etc.)

  • Identity, Account Security, Authentication/Authorization (OAuth, SAML, RBAC) protocols

  • AWS or other public cloud infrastructure, containerization such as Kubernetes 

  • Familiarity with networking protocols (Application layer)

In-Office Requirement Statement: 

• We recognize that the ideal environment for work is situational and may differ across departments. What this looks like day-to-day can vary based on the needs of each organization or role.

• This role will need to be in the office for in-person collaboration 1-2 times every 6-months and therefore can be situated anywhere in the country. 

Relocation Statement:

• This position is not eligible for relocation assistance. Visit our PinFlex page to learn more about our working model.

#LI-REMOTE

#LI-JT1