Senior Security Engineer I, IAM

Company Description
Etsy is the global marketplace for unique and creative goods. We build, power, and evolve the tools and technologies that connect millions of entrepreneurs with millions of buyers around the world. As an Etsy Inc. employee, whether a team member of Etsy, Reverb, or Depop, you will tackle unique, meaningful, and large-scale problems alongside passionate coworkers, all the while making a rewarding impact and Keeping Commerce Human.

Salary Range:

$159,000.00 - $187,000.00

What’s the role?

Etsy is seeking a Senior Security Engineer I to join our Identity and Access Management (IAM). This role will apply IAM experience to provide recommendations for our new team, and help mature Etsy’s IAM program. This person will lead the direction of moderately complex and loosely scoped engineering projects within the IAM domain. This includes developing a role based access control solution, consolidating authentication at Etsy and retiring outdated methods, and improving our identity governance such as user access reviews.

This is a full-time position reporting to the Engineering Manager of IAM and Compliance Engineering. In addition to salary, you will also be eligible for an equity package, an annual performance bonus, and our competitive benefits that support you and your family as part of your total rewards package at Etsy. 

For this role, we are considering candidates based in the United States. Candidates living within commutable distance of Etsy’s Brooklyn Office Hub or in the San Francisco Bay Area may be the first to be considered. For candidates within commutable distance, Etsy requires in-office attendance once or twice per week depending on your proximity to the office. Etsy offers different work modes to meet the variety of needs and preferences of our team. Learn more details about our  work modes and workplace safety policies here.

What’s this team like at Etsy?

A newly formed team within our larger Security Organization, our purpose is to ensure Etsy Admin have the right access to the right resources at the right time. We do this by handling authentication to systems via SSO identity providers, crafting access management solutions, implementing detective controls around access, and maintaining overall IdP security.

What does the day-to-day look like?

• Design, develop, and implement IAM solutions to handle user identities, roles, and access privileges across the organization.

• Work with authentication mechanisms, single sign-on (SSO) solutions, multi-factor authentication (MFA) methods, and authentication protocols (OpenID Connect (OIDC) and OAuth) to improve security posture.

• Implement identity governance and improved access control solutions, including user provisioning, access certification, and role-based access control (RBAC).

• Use programming languages (TypeScript, JavaScript, Python, PHP, etc.) and a variety of tools including Okta, Terraform, Chef, and GCP native tools. 

• Provide estimates or project ideas that will influence the team’s roadmap.

• Of course, this is just a sample of the kinds of work this role will require! You should assume that your role will encompass other tasks, too, and that your job duties and responsibilities may change from time to time at Etsy's discretion, or otherwise applicable with local law.

Qualities that will help you thrive in this role are:

• Strong background as a security software engineer.

• Software development experience, delivering successful projects within a team as a senior software engineer.

• Experience in crafting, implementing, and handling IAM solutions!

• Exposure to IAM principles, standards, and practices.

• Relevant domain expertise, including: Authentication protocols (SAML, OIDC, OAuth), Cloud IAM platforms (GCP preferred), Access control models (RBAC, ABAC), Identity Providers (Okta), and Identity Governance and Administration (IGA).

Additional Information

What's Next
If you're interested in joining the team at Etsy, please share your resume with us and feel free to include a cover letter if you'd like. As we hope you've seen already, Etsy is a place that values individuality and variety. We don't want you to be like everyone else -- we wa