Principal Software Engineer - Veza

📋 Description

• Own the identity model for workloads and agents, including SPIFFE/SPIRE trust domains, workload
• Architect ephemeral authentication and authorization end to end: short-lived credential issuance
• Define runtime authorization for agents, including what an agent can access, under whose delegated
• Lead identity architecture for the Agent Security roadmap, including Runtime Authorization, the
• Set identity standards for non-human identities across Veza's integrations, covering connector
• Define identity contracts for the graph, data model, and integrations architects; review designs

🎯 Requirements

• 12+ years in security or identity engineering, with a substantial share designing identity systems
• Strong background in identity and access: IGA, IAM, PAM, authorization models, access reviews
• Deep hands-on expertise in workload identity, specifically SPIFFE/SPIRE or equivalent, and
• Strong grounding in OAuth 2.x, OIDC, token exchange, and authorization models (RBAC, ABAC, ReBAC
• Understanding of non-human identity (service accounts, secrets, API keys, workload identity) and
• Experience building security products that meet compliance standards (SOC 2, FedRAMP or equivalent

🎁 Benefits

• Base pay range: $199,100 - $348,400
• Equity (when applicable)
• Variable/incentive compensation
• Health plans including flexible spending accounts
• 401(k) Plan with company match
• ESPP (Employee Stock Purchase Plan)