Senior Staff Security Engineer, zero-trust identity & cloud-native

About the Role

We are seeking a highly skilled Senior Staff Cloud Native Security Engineer to join our cutting-edge technology team.

In this role, you will be a thought leader responsible for designing, implementing, and optimizing multi-tenanted zero-trust identity security models within cloud-native architectures. You will work across teams to establish robust security design patterns to ensure compliance with industry best practices while protecting sensitive data. You will be influential to shape Uber engineering to adopt 'shifting-left' security principals, leading to an overall proactive cybersecurity maturity.

\\-\\-\\-\\- What the Candidate Will Do ----

1. Cloud IAM Strategy: Define and drive the strategy for securing cloud environments (Google Cloud Platform, OCI as predominant cloud, plus AWS and Azure) leveraging modern identity tools and techniques through well-defined federation strategies.
2. Policy Enforcement: Build and manage security policies, including identity and access management (IAM), network segmentation, and endpoint protections in a zero-trust model.
3. Zero-Trust Architecture Development: Design and implement scalable zero-trust frameworks for cloud-native applications, ensuring secure access and communication across microservices.
4. Engineering excellence: Develop automated security validation pipelines using Infrastructure-as-Code (IaC) tools (e.g., Terraform, Kubernetes). Be intentional about automation, reliability and scalability.
5. Collaboration and Mentorship: Act as a technical leader, mentoring engineers and collaborating with DevOps, infrastructure, and application teams to align IAM security strategies.

\\-\\-\\-\\- Basic Qualifications ----

- Bachelor's or Master's degree in Computer Science, Cybersecurity, or a related field.
- 10 years of experience in software engineering, with a focus on cloud-native systems and identity security.
- Proven expertise in zero-trust security models and architectures.
- Skilled in multi-cloud and hybrid SaaS ecosystem
- Understanding of Kubernetes, container runtime; versatile in cloud native security technologie
- Domain Expertise in cloud-native security tools (e.g.,Istio, Linkerd, Calico, OPA).
- Domain knowledge of identity IDP, federation, SSO, FIDO2, MFA, and PKI, Cloud IAM
- Proficiency with scripting and automation (Python, Go) and DevSecOps practices.
- Familiarity with SIEM, EDR, and logging solutions such as Splunk or Elastic Stack.
- Leadership and ability to influence cross-functional teams.
- Strong analytical and problem-solving skills; data-driven approaches
- Excellent written and verbal communication.

\\-\\-\\-\\- Preferred Qualifications ----

The role focuses on zero-trust architect, design patterns, cloud native systems. The following skillsets are bonus security skillsets that makes the role more effective:

1. Threat Modeling & Risk Management: Perform threat modeling, vulnerability assessments, and familiarity with risk analysis for complex cloud-native systems.
2. Threat detection and incident response: familiar with security incidents, ability to develop proactive strategies to mitigate risks through close collaboration with cyber defense teams.
3. Compliance & Standards: Ensure adherence to regulatory compliance frameworks such as GDPR, HIPAA, SOC 2, and NIST 800-207.

For San Francisco, CA-based roles: The base salary range for this role is USD$257,000 per year - USD$285,500 per year.

For Seattle, WA-based roles: The base salary range for this role is USD$257,000 per year - USD$285,500 per year.

For Sunnyvale, CA-based roles: The base salary range for this role is USD$257,000 per year - USD$285,500 per year.

For all US locations, you will be eligible to participate in Uber's bonus program, and may be offered an equity award & other types of comp. You will also be eligible for various benefits. More details can be found at the following link [](;br>
Uber is proud to be an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. If you have a disability or special need that requires accommodation, please let us know by completing [this form](;br>
Offices continue to be central to collaboration and Uber's cultural identity. Unless formally approved to work fully remotely, Uber expects employees to spend at least half of their work time in their assigned office. For certain roles, such as those based at green-light hubs, employees are expected to be in-office for 100% of their time. Please speak with your recruiter to better understand in-office expectations for this role.

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.