身份与访问平台工程经理
Engineering Manager, Identity & Access Platform
关于团队
安全是OpenAI使命的基石，确保通用人工智能造福全人类。身份基础设施工程团队是这一努力的核心，负责设计和构建身份和访问管理解决方案，保护模型权重、客户数据和跨多个云环境的关键系统。
该团队与OpenAI内部多个部门合作，包括应用工程、研究、IT、安全、基础设施和工程，为身份、访问管理、权限设置、编排和安全AI研究提供安全且可扩展的平台。
关于职位
我们正在寻找一位工程负责人来领导身份基础设施工程团队，该团队正在构建管理并扩展OpenAI研究、工程和内部平台访问的系统。
该职位位于云基础设施、身份、软件工程和安全关键运营的中心。您将带领工程师构建控制平面、策略系统、工作负载和代理授权模式、基础设施即代码以及操作基础架构，帮助OpenAI在保持访问可靠、可审计、最小权限和故障安全的前提下快速推进。
理想的候选人曾领导过负责大规模、关键任务基础设施的团队。他们能够在需要时深入代码和架构，同时为工程师和技术负责人提供清晰的方向和自主权，以发挥最佳水平。他们制定技术方向，培养强大的团队，做出持久的架构决策，并将模糊的0到1问题转化为OpenAI可以信任并长期构建的平台。
在此职位中，您将：
- 建立并领导一个高效的身份基础设施团队，技术上深入到足以设定方向，同时赋予团队交付的自主权。
- 定义身份平台的战略，作为跨人员、代理、工作负载、服务、云和内部系统的访问策略平面。
- 扩展访问管理器以适应不断变化的人类和代理生命周期，使常规访问自动化，敏感访问上下文化、时限化并可追溯。
- 构建访问图谱和资源目录，使访问决策可解释、风险意识强，并基于所有权、敏感性、环境和使用情况。
- 用风险分层的访问替代广泛的永久权限，使常规工作保持快速，特权访问狭窄且可观察，紧急访问成为例外。
查看英文原文
ABOUT THE TEAM
Security is at the foundation of OpenAI's mission to ensure that artificial general intelligence benefits all of humanity. The Identity Infrastructure Engineering team sits at the core of this effort, designing and building the identity and access management solutions that protect model weights, customer data, and critical systems across multiple cloud environments.
The team partners across OpenAI, including Applied Engineering, Research, IT, Security, Infrastructure, and Engineering, to provide secure and scalable platforms for identity, access management, permissioning, orchestration, and safe AI research.
ABOUT THE ROLE
We’re looking for an engineering leader to lead Identity Infrastructure Engineering, the team building the systems that govern and scale access across OpenAI’s research, engineering, and internal platforms.
This role sits at the center of cloud infrastructure, identity, software engineering, and security-critical operations. You’ll lead engineers building control planes, policy systems, workload and agent authorization patterns, infrastructure-as-code, and operational foundations that help OpenAI move quickly while keeping access reliable, auditable, least-privileged, and safe under failure.
The ideal candidate has led teams responsible for large-scale, mission-critical infrastructure. They can go deep into code and architecture when needed, while giving engineers and technical leads the clarity and ownership to do their best work. They set technical direction, grow strong teams, make durable architecture decisions, and turn ambiguous 0-to-1 problems into platforms OpenAI can trust and build on for years.
IN THIS ROLE, YOU WILL:
- Build and lead a high-performing Identity Infrastructure team, going deep enough technically to set direction while empowering the team to own delivery.
- Define the strategy for identity platform as the policy plane for access across people, agents, workloads, services, clouds, and internal systems.
- Scale Access Manager for evolving human and agent lifecycles, making routine access automatic and sensitive access contextual, time-bound, and accountable.
- Build the access graph and resource catalog that make access decisions explainable, risk-aware, and grounded in ownership, sensitivity, environment, and usage.
- Replace broad standing privilege with risk-tiered access, so routine work stays fast, privileged access is narrow and observable, and break-glass is exceptional.
- Establish first-class authorization for agents and workloads, with delegated, action-scoped permissions, time-bound access, full attribution, and no credential sharing.
- Partner across Security, Infrastructure, Applied, Research, IT, and product to turn identity standards into systems teams trust and adopt.
- Operate identity infrastructure as a mission-critical platform, with clear reliability goals, safe rollouts, strong observability, healthy on-call, and rigorous incident learning.
- Measure success by safer, faster, and more accountable access: reduced unnecessary privilege, stronger governance, broader coverage, clearer auditability, and less friction for legitimate work.
YOU MIGHT THRIVE IN THIS ROLE IF YOU:
- Have 10+ years building and developing engineering teams that own large scale platforms.
- Experience owning security critical production systems where reliability, least privilege, auditability, and operational rigor are essential.
- Deep judgment across cloud infrastructure, IAM, authentication, authorization, workload identity, privileged access, and policy enforcement.
- Hands-on technical depth to go into code and architecture, pressure-test designs, and guide tradeoffs across correctness, performance, scale, and operability.
- Track record turning complex infrastructure problems into adopted platforms across Engineering, Security, Research, and internal teams.
- High bar for engineering quality, operational discipline, and long-term ownership.
About OpenAI
OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity. We push the boundaries of the capabilities of AI systems and seek to safely deploy them to the world through our products. AI is an extremely powerful tool that must be created with safety and human needs at its core, and to achieve our mission, we must encompass and value the many different perspectives, voices, and experiences that form the full spectrum of humanity.
We are an equal opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other applicable legally protected characteristic.
For additional information, please see OpenAI’s Affirmative Action and Equal Employment Opportunity Policy Statement https://cdn.openai.com/policies/eeo-policy-statement.pdf.
Background checks for applicants will be administered in accordance with applicable law, and qualified applicants with arrest or conviction records will be considered for employment consistent with those laws, including the San Francisco Fair Chance Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act, for US-based candidates. For unincorporated Los Angeles County workers: we reasonably believe that criminal history may have a direct, adverse and negative relationship with the following job duties, potentially resulting in the withdrawal of a conditional offer of employment: protect computer hardware entrusted to you from theft, loss or damage; return all computer hardware in your possession (including the data contained therein) upon termination of employment or end of assignment; and maintain the confidentiality of proprietary, confidential, and non-public information. In addition, job duties require access to secure and protected information technology systems and related data security obligations.
To notify OpenAI that you believe this job posting is non-compliant, please submit a report through this form https://form.asana.com/?d=57018692298241&k=5MqR40fZd7jlxVUh5J-UeA. No response will be provided to inquiries unrelated to job posting compliance.
We are committed to providing reasonable accommodations to applicants with disabilities, and requests can be made via this link https://form.asana.com/?k=bQ7w9h3iexRlicUdWRiwvg&d=57018692298241.
OpenAI Global Applicant Privacy Policy https://cdn.openai.com/policies/global-employee-and-contractor-privacy-policy.pdf
At OpenAI, we believe artificial intelligence has the potential to help people solve immense global challenges, and we want the upside of AI to be widely shared. Join us in shaping the future of technology.