2 days ago
Base Salary
$388k - $558k/yr
Responsibilities
- Co-drive build-versus-buy evaluations for centralized authorization, including vendor bake-offs and analysis of latency, flexibility, operational cost, and vendor lock-in.
- Design authorization policy models covering roles, permissions, relationships, hierarchies, ownership, sharing, multi-tenancy, and organizational or resource-level scope.
- Partner on decision-engine architecture for low-latency authorization checks, caching, consistency tradeoffs, and policy audit and versioning.
- Integrate authorization checks with platform, security, and IAM teams across synchronous and asynchronous enforcement points.
- Build reference implementations, SDKs, and middleware that enable engineering teams to adopt the centralized authorization model.
- Contribute to policy unit tests, authorization test suites, and migration planning from scattered checks to a centralized policy engine.
Requirements
- Require 5–8+ years of backend or software engineering experience shipping production systems.
- Require hands-on experience building or working on authorization systems and strong RBAC fundamentals.
- Require conceptual knowledge of RBAC, ABAC, and ReBAC or Zanzibar-style approaches.
- Require exposure to evaluating or integrating a policy engine or framework such as Oso, OPA/Rego, Cerbos, OpenFGA, AuthZed/SpiceDB, or AWS Cedar, or equivalent in-house experience.
- Require strong systems-design skills involving low-latency decision services, caching, and consistency versus performance tradeoffs.
- Require proficiency in at least one backend stack: Java, Kotlin, Go, Node, or Python.
- Preferred qualifications include policy-as-code experience with Rego, Cedar, or Polar; build-versus-buy or vendor RFP experience; OAuth/OIDC and AuthN/AuthZ boundary familiarity; large-scale multi-tenant SaaS experience; external B2B organization access-control experience; and open-source contributions to authorization projects such as OpenFGA, Cerbos, or Casbin.
Benefits
- Annual salary and stock option compensation structure with no bonuses; the stated salary range is $388,000.00 –$558,000.00.
- Health plans, mental health support, a 401(k) retirement plan with employer match, stock option program, disability programs, health savings and flexible spending accounts, family-forming benefits, and life and serious injury benefits.
- Paid leave programs; full-time salaried employees receive flexible time off immediately, while full-time hourly employees accrue 35 days annually for vacation, holidays, and sick paid time off.
About Netflix
Netflix builds and operates a global streaming service for TV series, films, games, and live programming, and produces original content through its in-house studio. It serves consumers in 190+ countries via subscription and ad-supported plans on internet-connected devices. Founded in 1997 and headquartered in Los Gatos, California, Netflix is a public company traded on NASDAQ (NFLX).