高级资深软件工程师,平台 - IAM
Senior Staff Software Engineer, Platform - IAM
准备开展职业生涯中最有影响力的工作吗?在 Coinbase,我们对实现经济自由的使命毫不妥协。标准很高,环境紧张,我们喜欢这样。这里不是安于现状的地方,而是将你推向认知极限的地方。如果你准备好与那些不愿满足于“足够好”的人一起打造金融的未来,那你在这里。Coinbase 是以远程优先的公司,但并非完全远程。期待每季度进行一次高强度的线下工作会,称为“冲刺”(surges)。了解更多关于在 Coinbase 工作的信息。
我们正在招聘一位高级资深软件工程师(Uber 技术负责人),负责平台上的身份与访问管理,并主导统一人类、AI 代理、服务和工作负载身份的总体技术策略。IAM 是一个跨 700 多个内部系统的分布式问题,没有一个中心团队能单独完成,因此这个平台必须在所有身份类型上实现访问的一致性、可见性、可验证性和高效性。你将制定多个 pod 的架构,推动数百个工程团队的采用,并成为 Coinbase 身份与访问管理领域最资深的技术声音之一。
你将负责:
- 全面负责 IAM 的多年技术策略,包括统一员工、AI 代理和服务/工作负载身份的架构,使用共享的基本组件进行身份验证、授权、配置和治理。
- 在你并不管理的多个 pod 和团队之间推动架构决策 - 建立标准、评审门槛和集成合同,供其他工程团队构建。
- 为 700 多个系统制定采用策略,包括顺序、迁移路径以及自建与采购的决策,决定我们拥有哪些功能或集成哪些功能。
- 与安全、合规、IT、基础设施和产品工程领导合作,将审计和监管要求(UAR、SOX、SOC 2)转化为自动化控制和自动生成的证据。
- 领导数据模型和工具,回答“谁有权访问什么,为什么”,在异构环境中减少持续权限,同时让安全路径成为快速路径。
- 通过指导员工和高级工程师来提升技术储备,提高组织在身份领域的深度。
所需技能和经验:
- 12 年以上软件工程经验,有作为最资深工程师的记录,曾主导过复杂系统的设计和实施。
查看英文原文
Ready to do the most impactful work of your career? At Coinbase, we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase.
We're hiring a Senior Staff Software Engineer (Uber Tech Lead) for Identity & Access Management within Platform and own the technical strategy that unifies human, AI agent, service, and workload identity into one coherent platform. IAM is a distributed problem across 700+ internal systems that no central team can implement alone, so this platform must make access consistent, visible, provable, and efficient across every identity type. You'll set architecture across multiple pods, drive adoption with hundreds of engineering teams, and act as one of the most senior technical voices for identity and access management at Coinbase.
What you'll do:
- Own the multi-year technical strategy for IAM end to end, including the architecture that unifies workforce, AI agent, and service/workload identity under a common model with shared primitives for authentication, authorization, provisioning, and governance.
- Drive architecture decisions across multiple pods and teams you don't manage - establishing the standards, review bars, and integration contracts the rest of engineering builds against.
- Build the adoption strategy for 700+ systems, including sequencing, migration paths, and build-vs-buy decisions that determine what we own versus integrate.
- Partner with Security, Compliance, IT, Infrastructure, and product engineering leadership to translate audit and regulatory requirements (UAR, SOX, SOC 2) into automated controls and self-generating evidence.
- Lead the data model and tooling that answer "who has access to what, and why" across a heterogeneous estate, reducing standing privilege while making the secure path the fast path.
- Grow the technical bench by mentoring staff and senior engineers and raising the org's depth in identity as a domain.
Required Skills and Experience:
- 12+ years of software engineering experience, including a track record as the most senior technical leader on a platform spanning multiple teams with multi-year architecture driven to adoption across dozens of consuming teams.
- Deep IAM expertise across more than one domain (workforce identity, authorization, access lifecycle, or non-human identity) with substantive experience in service or workload identity - service-to-service auth, workload identity federation, or machine credential management at scale.
- Production Go experience and distributed systems design on AWS, with fluency in identity protocols and standards (OAuth 2.0, OIDC, SAML, SCIM, and workload identity patterns).
- Proven influence without authority at senior levels - you've changed the technical direction of teams and orgs outside your own and secured leadership alignment on ambiguous, org-wide access-risk problems.
- Ability to translate audit and regulatory requirements into automated technical controls, with clear written and verbal communication that frames complex identity problems for executive audiences.
- Utilizes generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality.
Pay Transparency Notice: Base salary varies by location (see range below). Total compensation may also include equity and bonus eligibility, and benefits (medical, dental, vision, 401(k)).
Annual base salary range (excluding equity and bonus):
$253,895—$298,700 USD
- Application Limit: Candidates may submit a maximum of 3 applications within a 6-month period.
- Equal Opportunity Employer: Coinbase is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or genetic information. Applicants with criminal histories will be considered consistent with applicable federal, state, and local laws.
- US Applicants: View Employee Rights, Know Your Rights, and E-Verify Notice of Participation.
- Accommodations: If you are an individual with a disability who needs a reasonable accommodation, email us your request and contact info at accommodations[at]coinbase.com. Need screen reading technology? Click here to download a free compatible screen reader and view the tutorial.
- Data Privacy & Arbitration: By submitting your application, you agree to our Candidate Privacy Notice. US applicants: By submitting your application, you agree to Arbitration of Disputes.