IAM安全工程师5
Security Engineer 5 - IAM
在 Netflix,我们的使命是要娱乐世界。我们一起写下一个集 - 推进故事讲述的边界,全球热爱和让难以想象的事情成为现实。我们是一个梦幻团队,沉迷于发现你融合创造力,直觉和尖端技术时会发生什么不舒服的兴奋。来做接下来的的一部分。**关于 The Team** Netflix 的企业身份与访问管理使用案例随着我们对内容,现场活动,游戏,广告吸引力,子公司收购等方面的投资而变得越来越复杂。身份集成和解决方案工程 (IISE) 团队是一个支持 Netflix 员工和我们的合作伙伴的中央安全团队。我们利用基于标准的 Identity 解决方案来连接全球商业和技术团队到他们需要做最好的工作的应用程序和工具。**关于角色** 我们正在寻找一个令人惊叹的同事,帮助我们设计和构建 Netflix®全球员工,承包商和外部合作伙伴的身份和访问安全解决方案。你的深入的 IAM 领域专业知识将在追求我们的双重任务时具有关键和影响力:通过网络安全和工程组织,你将与联邦身份验证,用户配置和退货,身份治理,合规性和访问管理领域的利益相关者密切合作。外部,你将会与 Netflix 广泛的供应商和服务提供商进行咨询,集成甚至提高第三方系统的身份能力** - 你是一个实用和实践安全工程师,拥有设计,构建和运营复杂的身份生命周期和访问控制解决方案的经验记录。- 优秀的口头和书面沟通技能与产品专注的心态结合。在这个角色中解释复杂的 IAM 概念以简单语言是绝对必要的,以推动我们许多利益相关者之间的协调。- 你更喜欢合作和解决问题比程序和处方。你很舒服处理模糊性和独立决策。- 你有了 st
查看英文原文
At Netflix, our mission is to entertain the world. Together, we are writing the next episode - pushing the boundaries of storytelling, global fandom and making the unimaginable a reality. We are a dream team obsessed with the uncomfortable excitement of discovering what happens when you merge creativity, intuition and cutting-edge technology. Come be a part of what’s next.
**About The Team**
Netflix’s Enterprise Identity & Access Management use cases have grown increasingly complex with our investments in Original content, Live events, Gaming, Ads, Attractions, subsidiary acquisitions, and more. The Identity Integrations and Solutions Engineering (IISE) team is a central security team that supports the Netflix workforce and our partners. We leverage standards-based Identity solutions to connect business and technical teams across the globe to the applications and tools they need to do their best work.
**About The Role**
We are looking for a stunning colleague to help us design and build Identity and Access security solutions for Netflix’s global population of employees, contractors, and external partners across all business verticals.
Your deep IAM domain expertise will be critical and impactful in pursuit of our dual-mission: reduce risk for Netflix while meeting the speed of business for our partners. You will participate in all aspects of solution design and delivery; including implementation, partner integration, and rollout strategy. Internally, you will work closely with stakeholders across the Security and Engineering organizations in areas of federated authentication, user provisioning and deprovisioning, identity governance, compliance, and access management. Externally, you will partner with Netflix’s wide range of vendors and service providers to consult, integrate, and even improve the Identity capabilities of third-party systems.
**What you’ll need to be successful**
- You are a pragmatic and hands-on security engineer with a proven track record of architecting, building and operating complex Identity Lifecycle and Access Control solutions.
- Excellent verbal and written communication skills combined with a product-focused mindset. Explaining complicated IAM concepts in simple language is absolutely necessary in this role to drive alignment with our many stakeholders.
- You prefer collaboration and problem solving over process and prescription. You are comfortable dealing with ambiguity and independent decision making.
- You have strong IAM fundamentals including experience with authentication and authorization standards and protocols (OpenID Connect, SCIM, OAuth, SAML, LDAP)
- You have deep domain expertise with all phases of the workforce Identity Lifecycle, starting with inception in upstream HCM platforms and continuing downstream across first and third party applications.
- Hands-on experience working with vendor IAM solutions such as Okta Workflows, Okta Identity Engine, Auth0, or equivalent.
- Experience with acquisition-driven identity integrations and migrations is strongly preferred, including knowledge of best practices and scalable integration patterns.
- Experience in CI/CD with at least one modern programming language such as Java (preferred) or Python. The role requires frequent reading and occasional writing to internal codebases.
- Experience running services on top of a Cloud computing platform, particularly AWS.
Generally, our compensation structure consists solely of an annual salary; we do not have bonuses. You choose each year how much of your compensation you want in salary versus stock options. To determine your personal top of market compensation, we rely on market indicators and consider your specific job family, background, skills, and experience to determine your compensation in the market range. The range for this role is $400,000.00 - $680,000.00. This compensation range will vary based on location.
Netflix provides comprehensive benefits including Health Plans, Mental Health support, a 401(k) Retirement Plan with employer match, Stock Option Program, Disability Programs, Health Savings and Flexible Spending Accounts, Family-forming benefits, and Life and Serious Injury Benefits. We also offer paid leave of absence programs. Full-time hourly employees accrue 35 days annually for paid time off to be used for vacation, holidays, and sick paid time off. Full-time salaried employees are immediately entitled to flexible time off. See more details about our Benefits [here](https://jobs.netflix.com/work-life-philosophy).
Netflix is a unique culture and environment. Learn more [here](https://jobs.netflix.com/culture).
[Inclusion](https://about.netflix.com/en/inclusion) is a Netflix value and we strive to host a meaningful interview experience for all candidates. If you want an accommodation/adjustment for a disability or any other reason during the hiring process, please send a request to your recruiting partner.
We are an equal-opportunity employer and celebrate diversity, recognizing that diversity builds stronger teams. We approach diversity and inclusion seriously and thoughtfully. We do not discriminate on the basis of race, religion, color, ancestry, national origin, caste, sex, sexual orientation, gender, gender identity or expression, age, disability, medical condition, pregnancy, genetic makeup, marital status, or military service.
Job is open for no less than 7 days and will be removed when the position is filled.