Security Engineer, Iam

Sentry Sentry · Enterprise · San Francisco, CA · Security

Security Engineer focused on Identity, Access and Management (IAM) to maintain and improve Sentry’s identity and access management practices. This role will own and shape access control practices, partner with Infrastructure, IT, and Platform teams to offer employees efficient secure self-service workflows, and secure human and non-human identities.

What you'd actually do

  1. Own and mature identity and access management infrastructure and tooling like SSO, MFA, directory services across corporate, development and production cloud environments.
  2. Continuously improve Sentry’s identity and access control practices with automation and self-service support for onboarding/offboarding, joiners/movers/leavers, access reviews, privileged access management, SaaS lifecycle management, and security incident response workflows.
  3. Champion and implement secure-by-design access principles like attribute and context aware grants, comprehensive logging, just-in-time (JIT) provisioning, least privilege, policy-as-code automation principles, and zero-trust.
  4. Secure our human and non-human identities: user accounts, service accounts, API keys, OAuth clients, agentic, and workload identities.

Skills

Required

  • Python
  • Terraform
  • infrastructure-as-code tools
  • APIs
  • SCIM
  • webhooks
  • identity platforms (IDP, IGA, PAM, CloudIAM)
  • cloud (AWS, GCP, Azure)
  • containerization
  • orchestration (Docker, Kubernetes)
  • CI/CD
  • source controls tools (Github, Gitlab)

Nice to have

  • Degree in Computer Science or a related field, equivalent training, or professional experience

What the JD emphasized

  • Own and mature
  • Continuously improve
  • Champion and implement
  • Secure our human and non-human identities
  • security problems
  • automation first
  • scalable, systematic solution
  • real ownership
  • build and drive work end-to-end
  • autonomy
  • 3+ years of industry experience designing, building, securing workforce identity and access control systems