Skip to content
Software Engineer – Cloud IAM
| Company | OpenAI |
|---|
| Location | San Francisco, CA, USA |
|---|
| Salary | $255000 – $325000 |
|---|
| Type | Full-Time |
|---|
| Degrees | |
|---|
| Experience Level | Mid Level, Senior |
|---|
Requirements
- A background in building secure systems—from core IAM services to orchestration layers that manage credentials, roles, or policies at scale.
- Proficiency in programming languages such as Python, Go, or similar, with a track record of writing high-quality, maintainable code.
- Experience with modern cloud infrastructure (AWS, Azure, GCP) and familiarity with industry-standard security protocols (OAuth, SAML, OpenID Connect) and authentication/authorization patterns.
- A security-focused mindset, with knowledge of threat modeling, risk assessment, and the ability to embed security features throughout the software development lifecycle.
- Excellent collaboration skills—working well across diverse technical and non-technical teams, turning broad objectives into actionable solutions.
Responsibilities
- Build new features for our IAM platform that seamlessly integrate with evolving cloud services, enabling teams to work efficiently while adhering to security best practices.
- Drive security innovation by designing tools, processes, and architectures that protect data at scale and reinforce a secure development culture across the organization.
- Collaborate cross-functionally with researchers, engineers, and compliance teams to address security requirements for multi-cloud deployments, large-scale model training, and emerging AI use cases.
- Implement and refine access policies that strike the right balance between enabling rapid experimentation and protecting high-value assets, including model weights and customer data.
- Troubleshoot complex identity or access issues across distributed systems, ensuring minimal downtime and a safe environment for AI research and product teams.
Preferred Qualifications
- Experience with modern cloud infrastructure (AWS, Azure, GCP) and familiarity with industry-standard security protocols (OAuth, SAML, OpenID Connect) and authentication/authorization patterns.
