← All roles

Software Engineer - Infrastructure Security

WorkOS· Engineering
Apply on company site
Remote$175k - $275kFull-timePosted 3w ago

About the role

Software Engineer - Infrastructure Security at WorkOS focusing on workload identity, authentication/authorization, and replacing static secrets with identity-based credentials within a platform engineering context.

Responsibilities

  • Build workload identity infrastructure. Make short-lived identity credentials a default part of every application's runtime environment, in partnership with application platform owners.
  • Bring identity-based authentication to internal services. Work with the owners of major internal dependencies to support identity certificates, make them the golden path for newly onboarding applications, and drive migration of existing ones.
  • Eliminate static secrets. Replace all static passwords and service tokens with short-lived identity credentials, and build identity-authenticated egress proxies and API abstractions that inject and automatically rotate managed secrets for the external dependencies that still require them.
  • Unify authorization. Build a single interface and framework through which authorization policies are centrally managed and enforced.

Qualifications

  • 5+ years of experience in software engineering, with a focus on security-related platform, infrastructure, or distributed systems.
  • Strong working knowledge of secrets management, fine-grained authorization, and workload identity systems.
  • Familiarity with the Kubernetes ecosystem and authentication/authorization technologies such as JWTs, X.509 certificates, PKI, cert-manager, SPIFFE/SPIRE, and OPA.
  • Experience building and operating production infrastructure that other teams depend on, with attention to availability and failure modes.
  • Proven ability to drive cross-team adoption of platform capabilities or lead large-scale migrations.

Skills

Required:Workload identityAuthentication/AuthorizationSecrets management

Benefits

  • 401k matching
  • Competitive Equity
  • Healthcare, dental and vision coverage
  • FSA, ST/LT Disability, Voluntary Life
  • Carrot fertility benefits
  • 20 days paid vacation + 10 holidays + unlimited sick leave
  • 12 weeks fully paid parental leave
  • Fitness: Monthly stipend for gyms, yoga classes, race registrations or whatever keeps you active
  • Wellness: Monthly stipend for a massage, meditations class, therapy, or activities that enhance your well-being
  • Commuter benefits for hybrid employees in SF/NYC
  • Unlimited token usage!
Last updated Oct 5, 2026. Interested? Apply on the company site.

About WorkOS

Your app, Enterprise Ready.

Developer APIs/SDKs for Enterprise Ready features like Single Sign-On, Directory Sync, Audit Logging, and more. Get started for free.

APIsSDKsSingle Sign-OnDirectory SyncAudit LoggingEnterprise Features
Company profileWebsite

More open roles at WorkOS