Your role and responsibilities
The TEAR team's Security UI POD builds and operates the systems that keep IBM Confluent Cloud and its customers secure - [authentication/authorization, RBAC, secrets and key management, audit logging, vulnerability remediation, and security tooling/guardrails for other teams]. Security work is high-trust and high-impact: correctness and a careful, defense-in-depth mindset are non-negotiable, and our work protects customer data and the platform's integrity. We partner closely with Product, AppSec, Platform, and engineering teams across the org.
This is a full-stack role, but it leans UI-heavy - you'll spend the majority of your time building security and identity experiences in React, Redux, and TypeScript, while still being able to make changes in the identity backend as needed ([backend: e.g., Go / Java]) as needed to deliver a feature end to end. Our stack runs on Kubernetes on [AWS/GCP/Azure], with [Postgres, Kafka, Grafana, OpenSearch].
What You'll Do
* Deliver well-scoped tasks within the Security UI POD on time and with quality, with mentorship from senior engineers as you grow your craft.
* Build rich, intuitive frontend experiences (in React, Redux, and TypeScript) for security and identity workflows - this is where you'll spend most of your time.
* Make changes in the identity backend as needed (e.g., [authN/authZ, RBAC, SSO/SAML/OIDC, session management]) so you can own a feature across the stack rather than just the UI layer.
* Learn the design and architecture of a security sub-component (e.g., [identity / RBAC / audit logging]) and become its go-to component expert.
* Write one-pagers for your sub-tasks and get them reviewed by peers and stakeholders; participate in design reviews and PR reviews.
* Apply a security-first mindset throughout - input validation, least privilege, safe defaults - across both UI and identity services.
* Learn Confluent's coding and software-development practices, dev-prod systems, and release process, and contribute to operational excellence (tests, monitoring, runbooks).
* Collaborate with AppSec and partner teams to implement and remediate security requirements.
Required education
Bachelor's Degree
Preferred education
Master's Degree
Required technical and professional expertise
What We're Looking For
* 1-2+ years of software engineering experience (strong new grads with relevant internships/projects welcome).
* Depth in frontend development with React, Redux, and TypeScript, and comfort working across the stack.
* Working proficiency in [backend language - e.g., Go, Java, C++, or another statically typed language], enough to make changes in the identity backend.
* Solid CS fundamentals and a growing understanding of distributed systems and cloud-native development.
* Interest in or exposure to security and identity concepts (authN/authZ, SSO/OIDC/SAML, encryption, common vulnerability classes, secure coding).
* Eagerness to learn, take feedback, and work closely with mentors.
* Strong communication, collaboration, and ownership of your tasks.
* You have a frontend craft mindset - you care about UX quality, performance, and maintainable component architecture - while being comfortable dipping into the identity backend when a feature needs it.
* You bring a security-first mindset - careful, detail-oriented, and curious about how things can go wrong.
* You're eager to learn a domain deeply and become the trusted owner of a component.
* You take pride in delivering well-scoped work reliably and on time
Preferred technical and professional experience
* Coursework, internships, certifications, CTF/security-project experience, or exposure to identity, cryptography, or cloud security
OTHER RELEVANT JOB DETAILS
Must have the ability to work in Canada without sponsorship.
This role will involve working with technology that is covered by Export Regulations sanctions. If you are a Foreign National from any of the following US sanctioned countries (Cuba, Iran, North Korea, Syria, and the Crimea, Luhansk, Donetsk, Kherson, and Zaporizhia regions of Ukraine) on a work permit, you are not eligible for employment in this position.
The salary range for the position is based on a full-time schedule. Your ultimate salary within this range may vary depending on your job-related skills and experience for this position.
