Sr. Security Software Engineer, Internal Identity & Access Management

About Pinterest:

Millions of people around the world come to our platform to find creative ideas dream about new possibilities and plan for memories that will last a lifetime. At Pinterest were on a mission to bring everyone the inspiration to create a life they love and that starts with the people behind the product.

Discover a career where you ignite innovation for millions transform passion into growth opportunities celebrate each others unique experiences and embrace theflexibility to do your best work. Creating a career you love Its Possible.

At Pinterest AI isnt just a feature its a powerful partner that augments our creativity and amplifies our impact and were looking for candidates who are excited to be a part of that. To get a complete picture of your experience and abilities well explore your foundational skills and how you collaborate with AI.

Through our interview process what matters most is that you can always explain your approach showing us not just what you know but how you think. You can read more about our AI interview philosophy and how we use AI in our recruiting process here.

The Internal Identity & Access Management (I2AM) team is responsible for critical production infrastructure that provides a foundational notion of Identity and strong authentication and authorization controls across Pinterest. Our backend is primarily written in Golang Python with some C while our frontend tools are written in React and TypeScript. Were looking for an experienced software engineer who will help us build robust tooling to define and evaluate access controls across production infrastructure. A security background is not necessary but ideal candidates will have familiarity with the problems or related spaces such as Infrastructure or Identity.

What youll do:

• Help shape our identity and authorization controls for users services and AI Agents.
• Design implement and maintain mission-critical software that will help us deliver robust IAM infrastructure and libraries to our customers.
• Leverage Agentic AI to improve systems and least privilege while applying judgment and verification to ensure correctness and quality. Improve code quality and system performance using AI Coding Agents.
• Collaborate with a variety of teams to build performant and resilient AAA (Authentication Authorization Auditing) platform controls into various high-traffic services including our AI Agents online/offline data platforms databases service mesh (Envoy) and other critical infrastructure components
• Represent the I2AM team across the Security Organization and with our X-org partners including Networking Data Platform Cloud Platform Agent Platform and product teams.
• Work with and mentor more junior engineers on the I2AM team

What were looking for:

• Bachelors degree in Computer Science Engineering or a related field or equivalent experience
• 4-5 years of software development experience
• A history of building & operating large scale distributed systems
• Past experience influencing technical architecture and roadmap adoption while working across other teams
• Proven track record of critical evaluation and verification of AI-assisted work (e.g. testing source-checking data validation peer review).
• Demonstrated ability to prototype and use AI tooling to improve reliability and quality of day-to-day workflow and system performance.
• High integrity and ownership: you protect sensitive data avoid over-reliance on AI and remain accountable for final decisions and deliverables.
• Experience in some of the following areas is a strong plus:
• Infrastructure provisioning tools (Terraform Puppet etc.)
• Identity Account Security Authentication/Authorization (OAuth SAML RBAC) protocols
• AWS or other public cloud infrastructure containerization such as Kubernetes
• Familiarity with networking protocols (Application layer)

In-Office Requirement Statement:

• We recognize that the ideal environment for work is situational and may differ across departments. What this looks like day-to-day can vary based on the needs of each organization or role.
• This role will need to be in the office for in-person collaboration 1-2 times every 6-months and therefore can be situated anywhere in the country.

Relocation Statement:

• This position is not eligible for relocation assistance. Visit our PinFlex page to learn more about our working model.

#LI-REMOTE

#LI-JT1