Staff Security Engineer, IAM
About the role
About Coinbase
Coinbase's mission is to increase economic freedom in the world by building the emerging onchain platform and the future global financial system. At Coinbase, identity and access controls are foundational to protecting customer funds, sensitive data, and the trust that underpins our position as the world's most trusted crypto platform.
About the Role
The Identity and Access Management (IAM) program, housed within Security, is a cross-functional team that designs, builds, and governs workforce identity services, privileged access controls, and automated governance across a complex and rapidly evolving technology ecosystem and regulatory landscape. This role serves as a senior technical leader within the IAM program, partnering with Engineering, IT, Platform, and business teams to architect and deliver identity solutions that balance zero-trust security with workforce enablement, reduce insider risk, and satisfy global regulatory requirements.
Key Responsibilities
- Lead the architectural vision and security engineering execution for Coinbase's Identity and Access Management (IAM) and workforce security platforms across multi-cloud infrastructure, extensive third-party SaaS ecosystem, and internally developed applications
- Evaluate, design, and implement "build, buy, or hybrid" strategies for workforce Identity Governance and Administration (IGA), integrating commercial tools with custom middleware and machine learning or AI models to automate complex access lifecycles and maximize ROI
- Write high-quality code to build scalable automation, custom integrations, and self-service guardrails that embed intelligent identity controls directly into CI/CD pipelines and SaaS provisioning workflows
Work Environment
While many roles at Coinbase are remote-first, this role requires in-person participation throughout the year. Team and company-wide offsites are held multiple times annually to foster collaboration, connection, and alignment, with attendance expected and fully supported.