Staff Security Engineer, IAM at Gitlab

Staff Security Engineer, IAM

Gitlab · Remote, Canada; Remote, United StatesRemotesenior

In short

▸Ingeniero de seguridad de identidad con enfoque en automatización y código, escalando acceso seguro en entornos empresariales.
▸Días típicos: diseñar políticas de acceso condicional, migrar configuraciones a código (Terraform, Python), liderar arquitecturas de seguridad en GCP/AWS y gobe
▸Destacado: liderar la transición de plataformas low-code a servicios de código, con enfoque en seguridad, automatización y gobernanza de agentes de IA.

Proficiency in English required for collaboration across global teams.

In ~1 minute you get: who interviews you, the likely questions answered from your CV, and your CV tailored to this job. Free, no card.

What they ask for

✓Experiencia demostrable en diseño y gobernanza de sistemas de identidad (IAM)
✓Conocimiento avanzado en Terraform, OpenTofu o Pulumi para infraestructura como código
✓Experiencia práctica con GCP Cloud Run y Python para servicios automatizados
✓Habilidades en la implementación de políticas de acceso condicional y just-in-time
✓Capacidad para liderar iniciativas técnicas y colaborar con equipos transversales
✓Experiencia en seguridad de herramientas de IA, SSO, SCIM y auditoría de acceso

Don't tick every box? That's normal — your free dossier shows your gaps and how to cover them in the interview.

TerraformOpenTofuPulumiGCP Cloud RunPythonOktaLumosNHI platformGCPAWS

Who should you write to at Gitlab?

Your free dossier identifies the people who'd interview you — their background, what they value, and how to reach out so you stand out before applying.

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role The Corporate Security Identity Team is on a mission to transform how our workforce ecosystem securely accesses the tools they need to do their best work, advancing from foundational controls to sophisticated, automated governance across our identity platforms and our emerging AI tooling. As a Staff Security Engineer, you'll be a senior technical leader and strategic anchor on the team. You're passionate about designing elegant solutions to complex identity challenges, whether that's architecting enterprise-scale conditional access policies, codifying our configuration of our identity platforms, or building governance frameworks for AI agents and non-human identities. You'll be responsible for critical systems, write technical proposals that influence our roadmap, raise the bar through design and code review, and lead cross-functional initiatives that span Security, IT, Engineering, Compliance and People teams. We're deliberately moving off click-ops and low-code platforms. Configuration is becoming peer-reviewed code; automation is becoming tested code running on GCP Cloud Run. Join us to lean in! What you’ll do • Design comprehensive identity and AI access solutions that scale with our business growth, from AI agent governance frameworks to privileged access workflows that eliminate standing access through just-in-time provisioning • Replace low-code automation with engineered services, migrating our existingiPaaS automation to Python services on GCP Cloud Run with source control, tests, CI and observability • Codify our identity platforms in Terraform/OpenTofu/Pulumi , leading the migration of Okta, Lumos, and our NHI platform from click-ops to peer-reviewed infrastructure-as-code, with a focus on global critical policies • Help re-architect identity and access across our GCP and AWS organizations, partnering on resource hierarchy design, secure-by-default guardrails (org policies, SCPs, permission boundaries), workload identity federation, and a credible path to least privilege for both human and workload access • Lead identity and access engineering for our enterprise AI platforms including administration, SSO and SCIM integration, audit logging, data controls, and policy enforcement for Claude (web, Claude Code, Cowork) and adjacent tools<

Don't apply unprepared

We research who's interviewing you, tailor your CV and rehearse you live — first one free.