Staff Security Engineer, Identity Access Management

Snap Inc is a technology company. We believe the camera presents the greatest opportunity to improve the way people live and communicate. Snap contributes to human progress by empowering people to express themselves, live in the moment, learn about the world, and have fun together.

The Company operates Snapchat, a visual messaging app that enhances your relationships with friends, family, and the world, and Specs Inc., a wholly-owned subsidiary dedicated to making computing more human, in addition to Bitmoji, Saturn, and other digital services.

Snap Security teams protect the trust and safety of our global community by securing the systems and data that power Snapchat. We safeguard hundreds of millions of Snapchatters every day, ensuring that every product and service is built on a foundation of security and resilience. Our values guide everything we do—from how we anticipate and mitigate threats to how we collaborate across Snap. We move fast, with precision, and always execute with privacy at the forefront.

We’re looking for a Staff Security Engineer to serve as the technical lead for SnapIAM, Snap’s identity and access management platform. SnapIAM provides a centralized platform for managing identities and access policies across cloud environments and services. In this role, you will set technical direction and deliver secure, reliable, and usable access capabilities for Snap’s engineering teams.

What you’ll do:

• Set the technical strategy and multi-year roadmap for SnapIAM, translating company-wide identity and access needs into scalable platform capabilities.
• Lead the design, implementation, and operation of SnapIAM services that manage identities, access policies, and permissions across cloud platforms and services.
• Drive secure, reliable, and maintainable solutions for cloud access management, workload and service identities, and access governance.
• Lead complex, multi-team initiatives from technical design through rollout, migration, and ongoing operations; identify dependencies and resolve technical blockers.
• Partner with Infrastructure, Engineering, and Security teams to integrate SnapIAM, improve adoption, and balance least-privilege access with developer productivity and usability.
• Define architecture, engineering standards, and operational practices that improve system reliability, observability, and safe change management.
• Contribute production-quality code, lead design and code reviews, and mentor engineers to strengthen technical execution and team ownership.
• Use AI-enabled engineering tools where appropriate to improve engineering velocity and quality, applying sound judgment and human review to generated work.

Knowledge, Skills & Abilities:

• Deep knowledge of identity and access management, including authentication, authorization, access policy design, and least-privilege controls.
• Strong software engineering fundamentals and experience designing, building, and operating distributed systems.
• Experience designing and implementing cloud security or identity systems, including access controls and policy management.
• Ability to establish technical strategy, make sound architectural tradeoffs, and deliver multi-quarter platform initiatives.
• Ability to influence technical decisions and align partner teams across organizational boundaries.
• Strong written and verbal communication skills, including the ability to explain complex technical decisions to engineering and security partners.
• Experience maintaining high standards for code quality, testing, reliability, and operational readiness.

Minimum Qualifications:

• Bachelor’s degree in a related technical field such as computer science or engineering, or equivalent practical work experience.
• 9+ years of post-bachelor’s industry experience; or a Master’s degree in a technical field and 8+ years of post-graduate security or software engineering experience; or a PhD in a related technical field and 5+ years of post-graduate security or software engineering experience.
• 1+ year of experience providing technical leadership or acting as a domain expert for an engineering organization.
• Experience designing and implementing identity and access management systems, cloud access controls, or security platforms.
• Experience architecting, designing, and developing distributed systems.

Preferred Qualifications:

• Experience with cloud identity and access management across GCP and AWS.
• Experience with workload or service identity, access governance, or identity lifecycle management.
• Experience leading migrations from legacy access-management systems to centralized platforms.
• Experience building automation and self-service workflows that improve access security and developer experience.
• Experience setting technical direction and delivering platform roadmaps across multiple engineering teams.

"Default Together" Policy at Snap: At Snap Inc. we believe that being together in person helps us build our culture faster, reinforce our values, and serve our community, customers and partners better through dynamic collaboration. To reflect this, we practice a “default together” approach and expect our team members to work in an office 4+ days per week. 

At Snap, we believe that having a team of diverse backgrounds and voices working together will enable us to create innovative products that improve the way people live and communicate. Snap is proud to be an equal opportunity employer, and committed to providing employment opportunities regardless of race, religious creed, color, national origin, ancestry, physical disability, mental disability, medical condition, genetic information, marital status, sex, gender, gender identity, gender expression, pregnancy, childbirth and breastfeeding, age, sexual orientation, military or veteran status, or any other protected classification, in accordance with applicable federal, state, and local laws. EOE, including disability/vets.

We are an Equal Opportunity Employer and will consider qualified applicants with criminal histories in a manner consistent with applicable law (by example, the requirements of the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, where applicable).

Our Benefits: Snap Inc. is its own community, so we’ve got your back! We do our best to make sure you and your loved ones have everything you need to be happy and healthy, on your own terms. Our benefits are built around your needs and include paid parental leave, comprehensive medical coverage, emotional and mental health support programs, and compensation packages that let you share in Snap’s long-term success!

Compensation

In the United States, work locations are assigned a pay zone which determines the salary range for the position. The successful candidate’s starting pay will be determined based on job-related skills, experience, qualifications, work location, and market conditions. The starting pay may be negotiable within the salary range for the position. These pay zones may be modified in the future.

Zone A (CA, WA, NYC):

The base salary range for this position is $251,000-$377,000 annually.

 

Zone B:

The base salary range for this position is $238,000-$358,000 annually.

Zone C:

The base salary range for this position is $213,000-$320,000 annually.

This position is eligible for equity in the form of RSUs.

If you believe this job description is missing required pay transparency information, please submit a report through this form: Job Description Pay Range Disclosure.