Senior Security Engineer - Identity & Access Governance

Los Angeles, California

Netflix logo
Apply now Apply later

Posted 3 weeks ago

The Elevator PitchNetflix’s workforce has rapidly grown from our Streaming Product team in our Los Gatos campus to a mix of technical, creative, studio and business workforce across 30+ global offices and production hubs. We made strategic bets to move towards a zero-trust information security posture for our workforce while leaning into a context not control posture. While our engineering team matures our identity & access products & services for the enterprise we need to gain ground in the efficacy of our current identity posture and establish large programs focusing on improving how our identity and access products are used by the business. 
This role will be the person who wakes up each day determined to buy down the risk in this space by discovering gaps, creating and aligning mitigating strategies and will hold Product and Studio/Corporate departments accountable in making technical, procedural or organizational changes. We place a very strong bet in Identity based controls and we need the operations and governance to ensure this bet pays off.
This role will partner tightly with Product teams like IAE, UFSE, PlatSec, SFE and SPI. It will also need to partner as tightly with key business stakeholders such as Talent, Employee Services, Finance and various Studio departments. 
• Areas of Focus: Identity Lifecycle Management, Authorization Policy Shaping and Adaptive Authentication Logic• What Success Looks like: Independently establishing a risk mitigation strategy for the IAM world, aligning opinionated positions on procedural and organizational gaps with senior leadership, effectively aligning Product and business teams to make pragmatic and impactful changes. 
Official Job DescriptionNetflix is the world's leading streaming entertainment service with over 167 million paid memberships in over 190 countries enjoying TV series, documentaries and feature films across a wide variety of genres and languages. Much of our growth still lies ahead as we invest in original content production around the world. A fundamental part of the Netflix culture is “context not control” which allows our employees to lean into innovation and do amazing things. When it comes to security, we fully embrace this part of our culture as well.
The TeamThe Studio & Corporate Security team secures the ecosystem our workforce operates in while maintaining low friction for our end users. By designing and developing infrastructure security strategies we seek to minimize exposures. Through continual validation and monitoring we strive to assure the posture of our enterprise, (e.g., what is our identity and access health, what is our endpoint risk picture or what is our supply chain risk management strategy). By empathizing with end user experience we seek to balance risk mitigation and freedom to innovate.
The OpportunityFor this role we are looking for a curious Senior Security Engineer with a passion for Identity and Access Governance. As Netflix evolves so does our workforce and partner needs. We’ve placed a strong bet in identity as a security capability for our enterprise and we seek to gain ground in the efficacy of our posture by focusing on how our identity and access products are used by the business. This role will drive security and risk reduction goals and partner with our Product engineering and Studio & Corporate business stakeholders in technical and process improvements. 
We’re looking for a candidate that brings a strong Identity & Access Governance background with focused experience in adapting and shifting business patterns to reduce risks. This role will also need to have technical skills to continually validate and assure our desired Identity security posture through partnership with Identity engineering teams. 

To Succeed You’ll Need

  • Relevant experience with Identity & Access Governance capabilities on both the engineering development and business adoption sides
  • Technical scripting and visualization skills to pragmatically measure and tell the Identity security story
  • Desire to stay up to date on trends, advancements and threats facing the Identity and Access industry
  • Communicate insights into complex Identity topics clearly in writing and verbally to a diverse audience with varying technical and subject matter backgrounds
  • Technical architecture and leadership in developing strategies related to identity lifecycle management, authorization policy shaping and adaptive authentication patterns.
  • Strong collaboration skills to work with a range of stakeholders from engineers and studio and corporate business stakeholders.
  • Comfort working in a rapidly evolving environment and dealing with ambiguity 
  • Strong desire to take ownership of problems and act on them independently
Job tags: Architecture Finance Strategy