2 days ago
Responsibilities
- Own the MCP gateway platform, including the approved-server catalog, connector onboarding, OAuth scopes, tool enablement, lifecycle management, and platform hygiene.
- Design and build intake, request, provisioning, documentation, and self-service workflows for AI tool access.
- Partner with Product Security and IAM on approvals, threat modeling, least-privilege controls, incident response, and operational guardrails.
- Operate the platform through support models, runbooks, SLAs, monitoring, observability, and vendor management.
- Define and report adoption, usage, and value metrics and identify high-impact integrations.
- Automate access governance across joiner/mover/leaver processes, access reviews, and SOX and regulatory audit evidence.
- Set technical direction for MCP, A2A, agent identity, internal and customer-facing AI interfaces, and build-versus-buy decisions.
- Mentor IC1–IC4 engineers and analysts and influence technical and business decisions across functions.
Requirements
- Bachelor’s degree and 12+ years of related experience, or a master’s degree and 10+ years, or a PhD and 7+ years, in IT operations, enterprise systems, platform engineering, or identity.
- Experience independently owning complex companywide platforms or programs, including planning, execution, and resourcing.
- Hands-on experience with LLM and agent tooling, MCP servers and clients, API gateways, and AI coding assistants.
- Deep knowledge of SSO/SAML, OAuth 2.0/OIDC, SCIM, Okta, least-privilege design, and RBAC.
- Strong integration and automation skills using REST/GraphQL APIs, Python or TypeScript, iPaaS tools such as Workato, and ServiceNow workflows.
- Experience operating in a regulated environment, including audit, data retention, and change management.
- Ability to translate between security, engineering, and business stakeholders and influence without authority.
- Preferred experience with AI gateways, API gateways, developer platforms, Cequence, Kong, Apigee, Slack bots, deflection bots, agentic workflows, NIST AI RMF, OWASP LLM Top 10, prompt injection, or tool poisoning.
Benefits
- The posting directs candidates to SoFi’s benefits page for comprehensive benefits.
- Remote work is not available from Hawaii, Alaska, or Puerto Rico.
- SoFi provides reasonable accommodations and equal employment opportunities.
Tech Stack
Categories
About SoFi
SoFi provides consumer banking, lending, and investing products, including student-loan refinancing, personal loans, mortgages, checking and savings, a credit card, and brokerage. It earns interest and fee revenue across SoFi Bank, N.A., and related subsidiaries, serving U.S. consumers via a mobile app. Founded in 2011 and headquartered in San Francisco, SoFi Technologies is publicly traded on Nasdaq under the ticker SOFI.
