Senior Product Security Engineer

Responsibilities

• Lead the design and implementation of secure, scalable cloud security architectures across GCP, Kubernetes, and containerized workloads
• Deliver security automation frameworks using Python or Java to reduce operational risk and manual toil
• Execute deep technical security assessments across API, application, GKE, and infrastructure layers
• Build and maintain cloud security infrastructure using Terraform
• Configure and implement advanced GCP security services including VPC Service Controls, IAM roles, and Cloud Armor
• Manage vulnerability remediation workflows for application, container, and cloud environments within defined SLAs
• Serve as a technical escalation point for complex cloud, IAM, and GKE security issues

Requirements

• 8+ years of experience in security engineering, cloud engineering, or software engineering
• 7+ years of hands-on programming experience in Python or Java
• 6+ years of experience with GCP, including GKE, Cloud Run, IAM, and VPC SC
• Strong expertise in Kubernetes security and container hardening
• Proficiency with Infrastructure-as-Code, specifically Terraform

Preferred Qualifications

• GCP Professional Cloud Security Engineer or Professional Cloud Architect certification
• Deep experience securing multi-tenant GKE environments and network segmentation
• Expertise in OAuth, OIDC, and API security engineering
• Offensive security certifications such as OSCP, OSEP, or GXPN
• Practical familiarity with red-team tradecraft and attack-chain decomposition

Benefits

• Comprehensive medical, dental, and vision insurance
• 401(k) with company match
• Unlimited paid time off (subject to policy)
• Parental leave
• Flexible spending accounts and health savings accounts
• Learning and development benefits

About the Company

ID.me is a next-generation digital identity wallet that simplifies how individuals securely prove their identity online. With over 152 million users, ID.me provides streamlined identity verification for federal agencies, state governments, and healthcare organizations, ensuring a secure digital identity for all.