Security Engineer - Cybersecurity IAM (Hybrid, Bucharest)
CrowdStrike1 day ago
Bucharest, RomaniaSenior
Responsibilities
- Drive IAM lifecycle operations and support emergency incident response for the product platform.
- Design, implement, and maintain access-control solutions for a multi-cloud global platform.
- Ensure the performance, reliability, and usability of access systems across thousands of services and users.
- Manage identity and access security risk and governance, including least-privilege controls, threat modeling, verification, and audits.
- Develop scripting and automation solutions for access operations and integrations.
- Advise cross-functional stakeholders and collaborate with product and engineering leaders.
- Stay current with IAM and cybersecurity developments to improve the organization’s security posture.
Requirements
- Expertise with cloud IAM services such as AWS IAM, Azure Entra, GCP IAM, and OCI IAM.
- Experience deploying access provisioning and governance systems, including just-in-time access, self-service, zero trust, and service mesh approaches.
- Strong understanding of SSO, federation, directory services, MFA, SAML, OIDC, and Kerberos.
- Proficiency in Python, Bash, or Go for scripting and automation.
- Experience operating at scale across complex services and user environments.
- Knowledge of security fundamentals, threat modeling, and risk management.
- Strong analytical and critical-thinking skills.
- Proven experience using AI technologies to improve decision-making, workflows, efficiency, and business outcomes.
- Preferred experience running projects with diverse stakeholders in fast-paced product organizations.
- Preferred experience with cloud-scale Linux or other Unix-like environments.
- Preferred familiarity with Terraform, SaltStack, or Ansible.
- Preferred experience designing and managing Microsoft Active Directory.
- Preferred experience with NIST, ISO 27001, SOC 2, or GDPR compliance frameworks.
- Preferred familiarity with cloud security and securing cloud-based applications and services in AWS, GCP, OCI, or Azure.
Benefits
- Market-leading compensation and equity awards.
- Comprehensive physical and mental wellness programs.
- Competitive vacation and holiday time.
- Paid parental and adoption leave.
- Professional development opportunities for employees at all levels.
- Employee networks, geographic neighborhood groups, and volunteer opportunities.
- Vibrant office culture with world-class amenities.
- Hybrid Bucharest work arrangement, with the posting also marked remote.
- Great Place to Work Certified globally.
About CrowdStrike
CrowdStrike builds the Falcon cloud-native security platform used by enterprises and governments to protect endpoints, cloud workloads, identities, and data with EDR, next-generation antivirus, threat intelligence, and managed threat hunting. Founded in 2011 and publicly traded on NASDAQ as CRWD, the company sells primarily by subscription and also provides incident response services; its systems ingest and analyze nearly 3 trillion security events per day across customer environments.