Position Summary
The Technology Risk team is responsible for Two Sigma's most critical authentication, authorization, and security infrastructure systems. We build, maintain, and evolve world-class security solutions including identity management systems, access control platforms, and configuration management databases that protect the company's technology while meeting evolving business needs.
This role is focused on infrastructure development and distributed systems engineering in service of Two Sigma's security products. The most critical datastore we maintain is the configuration management database, a proprietary graph database (CMDB), which serves as Two Sigma's centralized system of record - from infrastructure to applications to people. You will own the technical direction and implementation of CMDB: its data model, query surfaces, client libraries, user interface, and reliability of the service. If you're passionate about building something foundational, we'd love for you to apply today!
You will take on the following responsibilities:- Own the architecture and long-term evolution of CMDB's graph data model
- Drive performance and reliability work across CMDB's query interfaces - Web UI, REST, SPARQL for recursive graph traversal, and the Python/Java client
- Own the entire lifecycle of development, including design, testing, continuous deployment, productionization, and observability
- Mentor a small team of engineers
- Partner with data owners across the company to keep entity data accurate
- Develop solutions for scalable agentic permissions management
You should possess the following qualifications:- 7+ years of software engineering experience, including hands-on ownership of a data-modeling-heavy or graph-backed service in production
- Proficiency in SQL and large-scale data management
- Experience designing and operating large-scale REST APIs
- Track record of leading technical design for foundational infrastructure systems
You may possess the following preferred qualifications:- Experience with containerization technologies (Docker) and orchestration platforms (Kubernetes)
- Background in identity/access management systems (groups, transitive membership, authorization/entitlements)
- Experience exposing internal systems safely to LLM/agent tooling (e.g., MCP servers)
You will enjoy the following benefits:- Core Benefits: Fully paid medical and dental insurance premiums for employees and dependents, competitive 401k match, employer-paid life & disability insurance
- Perks: Onsite gyms with laundry service, wellness activities, casual dress, snacks, game rooms
- Learning: Tuition reimbursement, conference and training sponsorship
- Time Off: Generous vacation and unlimited sick days, competitive paid caregiver leaves
- Hybrid Work Policy: Flexible in-office days with budget for home office setup
The base pay for this role will be between $165,000 and $300,000. This role may also be eligible for other forms of compensation and benefits, such as a discretionary bonus, health, dental and other wellness plans and 401(k) contributions. Discretionary bonus can be a significant portion of total compensation. Actual compensation for successful candidates will be carefully determined based on a number of factors, including their skills, qualifications and experience.
