# Senior Platform Security Engineer

**Company:** [Discord](https://hotfix.jobs/companies/discord)
**Location:** Unspecified
**Role:** Security Engineering
**Salary:** $196k – $245k/yr
**Experience:** 5+ years
**Skills:** Identity And Access Management, Python, TypeScript, Rust, RBAC, OAuth, OIDC, SSO, Zero Trust, Mtls, Cloud Iam, Kubernetes, Terraform, Pki, Secrets Management
**Posted:** 2026-09-08

> Senior platform security engineer responsible for building identity and access management systems, Zero Trust architecture, cloud security baselines, and secure developer platforms. Requires 5+ years operating production systems and strong software development and security experience.

## Job Description

## Responsibilities
- Own end-to-end software engineering projects on an autonomous, horizontally integrated platform security team.
- Define identity management for autonomous agents and other non-human actors, including provisioning, scoping, authentication, authorization, and auditing.
- Build and evolve an employee authorization platform with discoverable, role-based, least-privilege, and self-service permissions.
- Design and harden Zero Trust architecture for human and service-to-service authentication across internal tooling.
- Automate continuous permission right-sizing according to least-privilege principles.
- Develop secure cloud identity baselines and secure the software supply chain from development through CI/CD and production.
- Advise on risk assessments, architecture, threat modeling, and code reviews.
- Build service-to-service and agent-to-service authentication and authorization capabilities.
- Provision service identities using PKI and mutual TLS (mTLS).
- Improve infrastructure access tooling for short-lived, auditable access.
- Improve secrets issuance, rotation, and scoping across infrastructure.

## Requirements
- 5+ years of experience building and operating production systems or infrastructure.
- 3+ years of experience writing software in a general-purpose programming language.
- 3+ years of experience securing systems with millions of users.
- Experience building or operating identity and access management systems, including authentication, authorization, or access control at scale.
- Understanding of RBAC, OAuth, OIDC, SSO, Zero Trust architectures, mTLS, and cloud IAM.
- Experience building and securing multi-cloud environments.
- Experience designing and building software for internal or external customers.

## Nice-to-haves
- Experience with Kubernetes, Docker, Distroless, or OCI.
- Familiarity with Terraform, Bazel, or Buildkite.
- Experience managing workload identity with PKI and operating mTLS between services.
- Experience with Cloudflare Access or Teleport.
- Experience with Vault, cloud KMS, or secrets managers, including rotation and least-privilege access.
- Experience debugging distributed systems on GCP, Cloudflare, or AWS.
- Experience leading complex migrations or engineering-wide risk management programs.
- Experience operating a service mesh such as Envoy or Istio.
- Experience managing and securing Linux or bare-metal hosts, including Salt.

## Compensation
- US base salary: $196,000–$245,000, plus equity and benefits.

## Similar jobs

- [Senior Software Engineer - Cloud Security](https://hotfix.jobs/jobs/4c2da306-e1e5-4a5f-9bd4-1504301784bc) - Snowflake - Menlo Park, CA - $200k – $288k/yr
- [Senior Manager - Network and Information Security](https://hotfix.jobs/jobs/9c9131aa-32b1-4bfe-baa8-f13261274796) - Atomicmachines - Emeryville, CA - $200k – $280k/yr
- [Senior Detection and Response Engineer](https://hotfix.jobs/jobs/ebb8ac3d-4282-4505-bdb8-4699d594df80) - Anyscale - $200k – $240k/yr
- [Senior Cloud Security Engineer](https://hotfix.jobs/jobs/7de4a9fc-5b59-40cc-b0f8-5573944d9ab3) - Anyscale - San Francisco, CA - $200k – $240k/yr
- [Senior Detection Engineer II](https://hotfix.jobs/jobs/bc6380b5-c412-4bf8-a9b0-af8410baa07c) - Instacart - Remote - $192k – $243k/yr

**Apply:** https://hotfix.jobs/jobs/3ac667bf-62fa-4280-8ccb-2af3468d8579
**Canonical:** https://hotfix.jobs/jobs/3ac667bf-62fa-4280-8ccb-2af3468d8579