Security Engineer - Cybersecurity IAM (Hybrid, Bucharest)
CrowdStrike1 day ago
Bucharest, RomaniaSenior
Responsibilities
- Drive IAM lifecycle operations and support emergency incident response for the product platform.
- Design, implement, and maintain access-control solutions for a multi-cloud global platform.
- Ensure the performance, reliability, and usability of access systems across thousands of services and users.
- Manage identity and access security risk and governance, including least-privilege controls, threat modeling, verification, and audits.
- Develop scripting and automation solutions for IAM operations and integrations.
- Advise cross-functional stakeholders and partner with product and engineering leaders on security alignment.
- Stay current with IAM and cybersecurity advancements to improve the organization’s security posture.
Requirements
- Expertise in cloud IAM services such as AWS IAM, Azure Entra, GCP IAM, and OCI IAM.
- Experience deploying access provisioning and governance systems, including just-in-time, self-service, zero-trust, and service-mesh approaches.
- Strong understanding of SSO, federation, directory services, MFA, and authentication protocols including SAML, OIDC, and Kerberos.
- Proficiency in Python, Bash, or Go for scripting and automation.
- Experience operating at scale and complexity across services and users.
- Knowledge of security fundamentals, threat modeling, and risk management.
- Strong analytical and critical-thinking skills.
- Proven experience using AI technologies to improve decision-making, workflows, efficiency, and business outcomes.
- Preferred experience running projects with diverse stakeholders, working in cloud-scale Linux or Unix-like environments, and using Terraform, SaltStack, or Ansible.
- Preferred familiarity with Microsoft Active Directory, NIST, ISO 27001, SOC 2, GDPR, and securing cloud-based applications and services.
Benefits
- Compensation and equity awards, comprehensive physical and mental wellness programs, competitive vacation and holidays, paid parental and adoption leave, professional development opportunities, employee networks, volunteer opportunities, and office amenities.
- Hybrid role based in Bucharest, Romania.
Categories
About CrowdStrike
CrowdStrike builds the Falcon cloud-native security platform used by enterprises and governments to protect endpoints, cloud workloads, identities, and data with EDR, next-generation antivirus, threat intelligence, and managed threat hunting. Founded in 2011 and publicly traded on NASDAQ as CRWD, the company sells primarily by subscription and also provides incident response services; its systems ingest and analyze nearly 3 trillion security events per day across customer environments.