[Remote] Staff Security Engineer

Note: The job is a remote job and is open to candidates in USA. GitHub is the world’s leading platform for agentic software development, and they are seeking a Staff Security Engineer to lead the technical direction of Identity & Access Management. This role involves setting architectural direction for identity services, leading IAM platform evolution, and ensuring the reliability and operational maturity of IAM services.ResponsibilitiesSet the technical direction for GitHub's identity and access management service area. Lead architecture and design across identity lifecycle, entitlements, privileged access, identity federation, and the workforce IDP. Author and shepherd design reviewsLead multi-quarter IAM platform evolution. Take complex identity programs (e.g., IDP migrations, privileged access maturation, identity lifecycle automation) from architecture through production rollout. Prioritize long-term correctness over shallow wins; design for reversibility, parity validation, and phased cutovers that let dependent workstreams proceed without regressionMake least-privilege and just-in-time access the default for production systems. Lead the design of least privileged access within production systems; partner with adjacent Engineering teams on evolving production system access patternsOwn reliability, supportability, and operational maturity for IAM services. Participate in and provide technical leadership for the on-call rotation; lead postmortems; reduce incident volume through systemic fixes. Set the quality bar for testing, observability, deployment safety, and rollback across the IAM service area. Mentor senior engineers and raise the bar for code and design reviewSkills9+ years experience in Software Engineering, Computer Science, or related technical discipline with proven experience maintaining and delivering production software coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, Go, Ruby, Rust, or PythonOR Associate's Degree in Computer Science, Electrical Engineering, Electronics Engineering, Math, Physics, Computer Engineering, Computer Science, or related field AND 8+ years experience in Software Engineering, Computer Science, or related technical discipline with proven experience maintaining and delivering production software coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, Go, Ruby, Rust, or PythonOR Bachelor's Degree in Computer Science or related field AND 7+ years experience in Software Engineering, Computer Science, or related technical discipline with proven experience maintaining and delivering production software coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, Go, Ruby, Rust, or PythonOR Master's Degree in Computer Science, Electrical Engineering, Electronics Engineering, Math, Physics, Computer Engineering, Computer Science, or related field AND 5+ years experience in Software Engineering, Computer Science, or related technical discipline with proven experience maintaining and delivering production software coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, Go, Ruby, Rust, or PythonOR Doctorate in Computer Science, Electrical Engineering, Electronics Engineering, Math, Physics, Computer Engineering, Computer Science, or related field AND 3+ years experience in Software Engineering, Computer Science, or related technical discipline with proven experience maintaining and delivering production software coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, Go, Ruby, Rust, or PythonOR equivalent experienceExperience with identity directories and IDPs (e.g., Okta, Entra ID / Azure AD) and authentication/authorization protocols (OAuth, OIDC, SAML, SCIM)Experience leading an enterprise IDP migration or large-scale identity platform consolidation, including parity validation, device trust, and phased cutoversExperience operating IAM services in one or more major cloud environments (AWS, Azure, or GCP)Experience designing systems and APIs intended for programmatic or AI-agent consumption (e.g., structured tool APIs, agentic workflows, paved-path templates)Experience providing technical leadership for a production identity servicesBenefitsAnnual bonusStockSales incentives based on revenue or utilization, depending on the terms of the plan and the employee's roleRemote-firstGenerous learning and growth opportunitiesExcellent benefits to support you, wherever you areCompany OverviewGitHub is a software company that offers code hosting services that allow developers to build software for open-source and private projects. It is a sub-organization of Microsoft. It was founded in 2008, and is headquartered in San Francisco, California, USA, with a workforce of 501-1000 employees. Its website is https://github.com.Company H1B SponsorshipGitHub has a track record of offering H1B sponsorships, with 3 in 2026, 26 in 2025, 17 in 2024, 14 in 2023, 20 in 2022, 20 in 2021, 10 in 2020. Please note that this does not guarantee sponsorship for this specific role.