Security Software Engineer II, Internal Identity & Access Management

The Internal Identity & Access Management (I2AM) team is responsible for critical production infrastructure that provides a foundational notion of Identity and strong authentication and authorization controls across Pinterest. Our backend is primarily written in Golang, Python with some C++ while our frontend tools are written in React and TypeScript. We're looking for a software engineer who will help us build robust tooling to define and evaluate access controls across production infrastructure. A security background is not necessary but ideal candidates will have familiarity with the problems or related spaces, such as Infrastructure or Identity. What you'll do: • Contribute to the technical roadmap for identity and authorization controls for users, services and AI Agents. • Design, implement, and maintain mission-critical features that will help us deliver robust IAM infrastructure and libraries to our customers. • Leverage Agentic AI to improve systems and least privilege, while applying judgment and verification to ensure correctness and quality. Improve code quality and system performance using AI Coding Agents. • As member of the Infrastructure Security team, build performant and resilient AAA (Authentication, Authorization, Auditing) platform controls into various high-traffic services including our AI Agents, online/offline data platforms, databases, service mesh. (Envoy) and other critical infrastructure components. What we're looking for: • Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent experience. • 2+ years of software development experience. • Experienced in developing features end to end, with preferred experience developing them in distributed systems. • Experience with critical evaluation and verification of AI-assisted work (e.g., testing, source-checking, data validation, peer review). • Demonstrated ability to prototype and use AI tooling to improve reliability and quality of day-to-day workflow and system performance. • High integrity and ownership: you protect sensitive data, avoid over-reliance on AI, and remain accountable for final decisions and deliverables. • Experience in some of the following areas is a strong plus: • Identity, Account Security, Authentication/Authorization (OAuth, SAML, RBAC) protocols • AWS or other public cloud infrastructure, containerization such as Kubernetes • Infrastructure provisioning tools (Terraform, Puppet, etc.) • Familiarity with networking protocols (Application layer) In-Office Requirement Statement: • We recognize that the ideal environment for work is situational and may differ across departments. What this looks like day-to-day can vary based on the needs of each organization or role. • This role will need to be in the office for in-person collaboration 1-2 times every 6-months and therefore can be situated anywhere in the country. Relocation Statement: • This position is not eligible for relocation assistance. Visit our PinFlex page to learn more about our working model. #LI-REMOTE #LI-JT1 At Pinterest we believe the workplace should be equitable, inclusive, and inspiring for every employee. In an effort to provide greater transparency, we are sharing the base salary range for this position. The position is also eligible for equity. Final salary is based on a number of factors including location, travel, relevant prior experience, or particular skills and expertise. Information regarding the culture at Pinterest and benefits available for this position can be found here. US based applicants only $123,696-$254,667 USD