Senior Security Engineer I, IAM

Company Description
Etsy is the global marketplace for unique and creative goods. We build, power, and evolve the tools and technologies that connect millions of entrepreneurs with millions of buyers around the world. As an Etsy Inc. employee, whether a team member of Etsy, Reverb, or Depop, you will tackle unique, meaningful, and large-scale problems alongside passionate coworkers, all the while making a rewarding impact and Keeping Commerce Human.

What’s the role?

Etsy is seeking a Senior Security Software Engineer I to join our Identity and Access Management (IAM) team within the larger Security org. This role will utilize IAM experience to provide input in the direction of our new team, and help mature Etsy’s identity and access management program. You’ll be tasked with leading the direction of moderately complex and loosely scoped engineering projects within the IAM domain. This includes developing a role based access control solution, consolidating authentication at Etsy and retiring outdated methods, and improving our identity governance such as user access reviews.

This is a full-time position reporting to the Engineering Manager of IAM and Compliance Engineering. In addition to salary, you will also be eligible for an equity package, an annual performance bonus, and our competitive benefits that support you and your family as part of your total rewards package at Etsy. 

For this role, we are considering candidates based in the United States. Candidates living within commutable distance of Etsy’s Brooklyn Office Hub or in the San Francisco Bay Area may be the first to be considered. For candidates within commutable distance, Etsy requires in-office attendance once or twice per week depending on your proximity to the office. Etsy offers different work modes to meet the variety of needs and preferences of our team. Learn more details about our  work modes and workplace safety policies here.

What’s this team like at Etsy?

A newly formed team within our larger Security Organization, our purpose is to ensure Etsy Admin have the right access to the right resources at the right time. We do this by handling authentication to systems via SSO identity providers, crafting access management solutions, implementing detective controls around access, and maintaining overall IdP security.

What does the day-to-day look like?

• You will help craft, develop, and implement IAM solutions to manage user identities, roles, and access privileges across the organization.

• You will work with authentication mechanisms, single sign-on (SSO) solutions, and multi-factor authentication (MFA) methods to improve security posture.

• You are familiar with identity authentication protocols such as OpenID Connect (OIDC) and OAuth.

• You will help implement identity governance and improved access control solutions, including user provisioning, access certification, and attribute-based access control (ABAC).

• You will work with TypeScript, JavaScript, Python, PHP, and may also use other languages. 

• You will work with a variety of tools, including Okta, Terraform, Chef, and GCP native tools. 

• You are comfortable providing estimates or project ideas that will influence your team’s roadmap.

• Of course, this is just a sample of the kinds of work this role will require! You should assume that your role will encompass other tasks, too, and that your job duties and responsibilities may change from time to time at Etsy's discretion, or otherwise applicable with local law.

Qualities that will help you thrive in this role are:

• 5+ years of experience as a security software engineer

• Experience in professional software development, delivering successful projects within a team as a senior software engineer.

• Experience in designing, implementing, and managing IAM solutions.

• Strong knowledge of identity and access management principles, standards, and best practices.

• Identity and access management subject matter expertise, includ