Staff Security Engineer, Identity Access Management

We’re looking for a Staff Security Engineer to serve as the technical lead for SnapIAM, Snap’s identity and access management platform. SnapIAM provides a centralized platform for managing identities and access policies across cloud environments and services. In this role, you will set technical direction and deliver secure, reliable, and usable access capabilities for Snap’s engineering teams. What you’ll do: • Set the technical strategy and multi-year roadmap for SnapIAM, translating company-wide identity and access needs into scalable platform capabilities. • Lead the design, implementation, and operation of SnapIAM services that manage identities, access policies, and permissions across cloud platforms and services. • Drive secure, reliable, and maintainable solutions for cloud access management, workload and service identities, and access governance. • Lead complex, multi-team initiatives from technical design through rollout, migration, and ongoing operations; identify dependencies and resolve technical blockers. • Partner with Infrastructure, Engineering, and Security teams to integrate SnapIAM, improve adoption, and balance least-privilege access with developer productivity and usability. • Define architecture, engineering standards, and operational practices that improve system reliability, observability, and safe change management. • Contribute production-quality code, lead design and code reviews, and mentor engineers to strengthen technical execution and team ownership. • Use AI-enabled engineering tools where appropriate to improve engineering velocity and quality, applying sound judgment and human review to generated work. Knowledge, Skills & Abilities: • Deep knowledge of identity and access management, including authentication, authorization, access policy design, and least-privilege controls. • Strong software engineering fundamentals and experience designing, building, and operating distributed systems. • Experience designing and implementing cloud security or identity systems, including access controls and policy management. • Ability to establish technical strategy, make sound architectural tradeoffs, and deliver multi-quarter platform initiatives. • Ability to influence technical decisions and align partner teams across organizational boundaries. • Strong written and verbal communication skills, including the ability to explain complex technical decisions to engineering and security partners. • Experience maintaining high standards for code quality, testing, reliability, and operational readiness. Minimum Qualifications: • Bachelor’s degree in a related technical field such as computer science or engineering, or equivalent practical work experience. • 9+ years of post-bachelor’s industry experience; or a Master’s degree in a technical field and 8+ years of post-graduate security or software engineering experience; or a PhD in a related technical field and 5+ years of post-graduate security or software engineering experience. • 1+ year of experience providing technical leadership or acting as a domain expert for an engineering organization. • Experience designing and implementing identity and access management systems, cloud access controls, or security platforms. • Experience architecting, designing, and developing distributed systems. Preferred Qualifications: • Experience with cloud identity and access management across GCP and AWS. • Experience with workload or service identity, access governance, or identity lifecycle management. • Experience leading migrations from legacy access-management systems to centralized platforms. • Experience building automation and self-service workflows that improve access security and developer experience. • Experience setting technical direction and delivering platform roadmaps across multiple engineering teams. "Default Together" Policy at Snap: At Snap Inc. we believe that being together in person helps us build our culture faster, reinforce our values, and serve our community, customers and partners better through dynamic collaboration. To reflect this, we practice a “default together” approach and expect our team members to work in an office 4+ days per week.  : Snap Inc. is its own community, so we’ve got your back! We do our best to make sure you and your loved ones have everything you need to be happy and healthy, on your own terms. Our benefits are built around your needs and include paid parental leave, comprehensive medical coverage, emotional and mental health support programs, and compensation packages that let you share in Snap’s long-term success! Compensation In the United States, work locations are assigned a pay zone which determines the salary range for the position. The successful candidate’s starting pay will be determined based on job-related skills, experience, qualifications, work location, and market conditions. The starting pay may be negotiable within the salary range for the position.These pay zones may be modified in the future. : The base salary range for this position is $251,000-$377,000 annually. Zone B: The base salary range for this position is $238,000-$358,000 annually. Zone C: The base salary range for this position is $213,000-$320,000 annually. This position is eligible for equity in the form of RSUs.