IAM Software Engineer II

About the role and team

Sec Eng at Uber means building for real-world impact under real-world constraints. The Identity and Access Management ( IAM) team is currently driving a high-stakes transformation of our governance systems and microservices, moving away from legacy polished pictures toward adaptive, AI-driven security models. You will design and build the extensible features, APIs, and workflows that manage authentication and authorization for Uber's global internal workforce and services.

We are looking for a Security Engineer who stays calm under pressure and possesses the grit to own a project from the first design doc to debugging production issues at scale. If you are energized by the challenge of bridging digital security with real-world movement and want to lead the adoption of industry-leading trends like RAG and MCP in the identity space, this is where you will grow.

What you'll do

- Design, build, and maintain centralized access management systems and risk models where performance, security, and scale are inseparable.
- Solve messy, high-impact identity problems (such as birthright provisioning and access certifications) often without a clear starting point.
- Own your work end-to-end, from writing high-quality engineering design documents to managing critical platform changes using Terraform and standard build code.
- Champion software engineering best practices like code health, testing, and design clarity even when project stakes and pressure are high.
- Collaborate across disciplines to integrate SSO applications and middleware technologies while acting as the technical voice of the identity team.
- Navigate technical debt and legacy complexity within LDAP, MFA, and distributed database systems to unblock developer productivity.

Basic Qualifications

- Senior/Staff seniority in the development, design, and consulting of SailPoint IIQ or similar IGA and authentication platforms.
- Experience building and documenting high-quality code for complex software systems scaling to millions of users.
- Proficiency with large-scale distributed storage and SQL database systems such as MySQL.
- Strong understanding of Role-Based Access Control (RBAC), Policy-Based Access Control (PBAC), and Attribute-Based Access Control (ABAC).
- Education requirement: Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent experience).