Staff Security Engineer, IAM & Zero Trust

  • Full-time

Company Description

Twitter is what’s happening and what people are talking about right now. For us, life's not about a job, it's about purpose. We believe real change starts with conversation. Here, your voice matters. Come as you are and together we'll do what's right (not what's easy) to serve the public conversation.

Job Description

You will be responsible for driving the strategy and implementation for Twitter’s Zero Trust Initiative to solve security problems, reduce risk, and keep Twitter internal systems and employees safe and secure. This includes practical application of Zero Trust principles across Twitter’s suite of corporate systems, with an initial focus on access management.

In this role, you will:

  • Own the development and refinement of Twitter’s Zero Trust strategy.

  • Own the design and implementation of Zero Trust remote access solutions to enable all Twitter employees to do their job reliably and securely. 

  • Help grow and develop a group of Zero Trust focused engineers.

  • Lead the cross-functional design and implementation of a holistic IAM framework that applies Zero Trust principles, leveraging signals from multiple platforms (Okta, Cloudflare, MDM, Uptycs, GSuite) to standardize access policies across all employee use cases. 

  • Work with partner teams to implement the Zero Trust IAM framework. 

  • Partner with appropriate stakeholders to develop a framework to classify applications and services based on risk, data types and use cases.

  • Build health working relationships with partner teams to ensure alignment and progress towards Zero Trust goals.

  • Advocate and evangelize for Zero Trust with stakeholders throughout Twitter.

Qualifications

  • 5 or more years of relevant experience in information security

  • Expert level knowledge of Zero Trust/BeyondCorp and related security models.

  • Experience translating security models into an actionable strategy that solves key security problems and increases overall security posture in a large organization. 

  • Strong understanding of data management and classification

  • Background in IAM/Authn/Authz systems

  • Experience with networking concepts such as:

    • Routing Protocols (e.g. BGP/OSPF/IS-IS)

    • Load Balancing

    • Stateless and Stateful ACLs

  • Experience integrating third party systems to achieve security and usability goals. 

  • Fundamental understanding of Web applications including AJAX/JSON/CORS/CORB

Additional Information

We care deeply about the people who use our platform. We strive to protect them and ensure they can make informed decisions about how they choose to use Twitter. We put our users first and consider their well-being in all of our decisions.

We care about making work rewarding and productive for everyone, with flexibility in where and how you work, wellness benefits, twenty weeks of parental leave, and unlimited vacation that we believe you should be taking.

We value diversity of experience and ideas. We love sharing knowledge and learning from each other. We have regular lightning talks and get together with the other Twitter teams for tech talks. And there are many study groups you can join.

All your information will be kept confidential according to EEO guidelines.

Privacy Policy