Security Engineer - Identity and Access
Rubrik · Posted Oct 12
Cloud data security, zero-trust backup, threat analytics, and cyber resilience services
Get a personal compatibility score
Add a resume for personal matches
About the role
Rubrik's Information Security organization advances the overall state of security at Rubrik through purposeful initiatives and coordination of large security projects, building technologies, tools, and processes that enable teams to develop secure software and protect data and systems with appropriate security controls. The team also develops systems to monitor and respond to attacks and provides security awareness education. This role is a hands-on Identity and Access Management (IAM) Engineer who will execute technical strategy across the identity and access security management program, spanning Identity Governance & Administration, Access Management, Privileged Access Management, Non-Human Identity security, and Agentic Identity security, designing systems from the ground up and building automation that scales across a large application portfolio.
What you will do
- Solution Design: Design and build IAM solutions — including configurations, integrations, and workflows — that align with evolving business requirements, security policies and regulatory requirements (eg., SOX, GDPR).
- Application Onboarding & Integration: Lead the onboarding of applications into IAM platforms, integrating across diverse systems including major cloud platforms, SaaS applications, and in-house systems.
- Build automation and policy-as-code frameworks: Manage identity access policies as versioned, auditable code — using source control, CI/CD, and infrastructure-as-code to automate identity and access management changes instead of manual, ticket-driven processes.
- Deepen identity governance platform integrations: Build and extend automated provisioning/deprovisioning, entitlement aggregation, and access certification workflows across the application portfolio.
- Privileged Access Management: Design privileged access models across applications and endpoints — including session management and just-in-time elevation — to minimize standing access without slowing teams down.
- Non-human/Agentic identity governance: Build inventory, risk-scoring, runtime policy enforcement and remediation tooling for service accounts, API keys, workload identities, AI agents etc
- IAM Platform Auditing & Posture Management: Review and audit identity and access management platforms to identify security misconfigurations, strengthen security policies, and enforce industry best practices.
- Incident Response & Forensics Support: Provide subject matter expertise during security incidents to support investigations into identity and access related events.
- On-Call Coverage & Escalations: Engage in on-call rotations and provide technical escalation support outside standard business hours.
- Technical governance and design reviews: Enforce technical standards across the team, evaluate identity related design proposals, and serve as the main escalation point for complex identity security decisions and integration challenges
Skills used in this role
What the employer is looking for
- Minimum of 6 years of experience in Identity and Access Management (IAM), with deep hands-on experience implementing and managing IAM solutions within leading cloud environments such as AWS, Azure, or Google Cloud Platform.
- Proficiency with modern identity platforms (e.g., SailPoint, Okta, CyberArk, or equivalents) and identity protocols such as SAML, OpenID Connect, and OAuth.
- Strong understanding of Identity Governance, Privileged Access Management (PAM) principles, Non-Human Identities/AI Identities and Access Certification processes.
- Proficiency in a general-purpose programming language (e.g., Python, Go), with experience in infrastructure-as-code (IaC) and CI/CD tooling (e.g., Terraform, GitHub Actions) preferred.
- Demonstrated experience designing least-privilege / RBAC or ABAC models at scale, and reasoning about tradeoffs between security posture and developer/user friction.
- Experience operating in a regulated environment (e.g., SOX) and translating control requirements into engineering work.
- Track record of technical leadership: driving cross-team design decisions, writing technical documentation.
- Effective communication skills, both written and verbal, with the ability to convey complex information clearly to technical and non-technical audiences.
- Strong analytical and problem-solving skills, with the ability to lead cross-functional collaborations and drive technical security initiatives.
- Ability to quickly learn, adapt, and lead in fast-paced and dynamic technical environments.
Benefits and support
- Compensation and benefits are detailed in the job posting
About Rubrik
Rubrik is a cloud-native cybersecurity and data resilience company that provides zero-trust data protection, threat monitoring, and automated enterprise recovery solutions. The company delivers a unified platform designed to safeguard hybrid and multi-cloud environments against ransomware and malicious cyber threats. By integrating AI-driven operations and risk analytics, Rubrik helps enterprises ensure business continuity and digital trust.
- Industry
- Cloud Computing
- Company size
- 3000-5000 employees
- Founded
- 2014
- Location
- Palo Alto, California, USA
- Funding stage
- Public Company
Funding
Public Company · $553M raised
- 2021-08-17Series FUndisclosed
- 2021-11-01Secondary Market$1.3M
Leadership
Co-Founder, CEO and Chairman
Co-Founder and CTO
Chief Financial Officer
Chief Product Officer
Recent coverage
Rubrik Newsroom
Rubrik Reports Fourth Quarter and Fiscal Year 2026 Financial Results2026-03-12
Help Net Security
Rubrik launches Autonomous Business Recovery to rebuild cloud applications after cyberattacks2026-06-10
Rubrik Newsroom
Rubrik Unveils the AI-Ready Unstructured Data Layer for Enterprise Data Intelligence Platforms2026-06-09
Insider Monkey
Rubrik (RBRK) Has Outperformed the Market in 2026. Is the Rally Sustainable?2026-10-05