Security Engineer 5 - IAM

About The Role

We are looking for a stunning colleague to help us design and build Identity and Access security solutions for Netflix’s global population of employees, contractors, and external partners across all business verticals.

Your deep IAM domain expertise will be critical and impactful in pursuit of our dual-mission: reduce risk for Netflix while meeting the speed of business for our partners. You will participate in all aspects of solution design and delivery; including implementation, partner integration, and rollout strategy.

Internally, you will work closely with stakeholders across the Security and Engineering organizations in areas of federated authentication, user provisioning and deprovisioning, identity governance, compliance, and access management. Externally, you will partner with Netflix’s wide range of vendors and service providers to consult, integrate, and even improve the Identity capabilities of third-party systems.

What you’ll need to be successful

• You are a pragmatic and hands-on security engineer with a proven track record of architecting, building and operating complex Identity Lifecycle and Access Control solutions.
• Excellent verbal and written communication skills combined with a product-focused mindset. Explaining complicated IAM concepts in simple language is absolutely necessary in this role to drive alignment with our many stakeholders.
• You prefer collaboration and problem solving over process and prescription. You are comfortable dealing with ambiguity and independent decision making.
• You have strong IAM fundamentals including experience with authentication and authorization standards and protocols (OpenID Connect, SCIM, OAuth, SAML, LDAP)
• You have deep domain expertise with all phases of the workforce Identity Lifecycle, starting with inception in upstream HCM platforms and continuing downstream across first and third party applications.
• Hands-on experience working with vendor IAM solutions such as Okta Workflows, Okta Identity Engine, Auth0, or equivalent.
• Experience with acquisition-driven identity integrations and migrations is strongly preferred, including knowledge of best practices and scalable integration patterns.
• Experience in CI/CD with at least one modern programming language such as Java (preferred) or Python. The role requires frequent reading and occasional writing to internal codebases.
• Experience running services on top of a Cloud computing platform, particularly AWS.

Pay and benefits

Generally, our compensation structure consists solely of an annual salary; we do not have bonuses. You choose each year how much of your compensation you want in salary versus stock options. To determine your personal top of market compensation, we rely on market indicators and consider your specific job family, background, skills, and experience to determine your compensation in the market range. The range for this role is $400,000.00 - $680,000.00. This compensation range will vary based on location.

Netflix provides comprehensive benefits including Health Plans, Mental Health support, a 401(k) Retirement Plan with employer match, Stock Option Program, Disability Programs, Health Savings and Flexible Spending Accounts, Family-forming benefits, and Life and Serious Injury Benefits. We also offer paid leave of absence programs. Full-time hourly employees accrue 35 days annually for paid time off to be used for vacation, holidays, and sick paid time off. Full-time salaried employees are immediately entitled to flexible time off. See more details about our Benefits here.

Netflix is a unique culture and environment.

Inclusion is a Netflix value and we strive to host a meaningful interview experience for all candidates. If you want an accommodation/adjustment for a disability or any other reason during the hiring process, please send a request to your recruiting partner.

We are an equal-opportunity employer and celebrate diversity, recognizing that diversity builds stronger teams. We approach diversity and inclusion seriously and thoughtfully.

Job is open for no less than 7 days and will be removed when the position is filled.