Base Salary
$161k - $218k/yr
Responsibilities
- Design and independently deliver complex cloud access management and fine-grained authorization services.
- Build backend services, APIs, policy evaluation paths, automation, AI-agent tooling, and React frontends.
- Develop authorization models including ABAC, relationship-based access control, policy-as-code, just-in-time access, workload identity, and least privilege.
- Integrate AWS IAM/STS, GCP IAM, cross-account access, SAML, OIDC, and OAuth 2.0.
- Identify root causes of security risks, remediate access-control gaps, and define guidance for other teams.
- Threat model systems for privilege escalation, confused deputy issues, token replay, policy bypass, and dependency compromise.
- Automate control testing and continuous evidence collection for SOX logical access and other regulatory controls.
- Own observability, alerting, and monitoring after release.
- Lead technology evaluations, major project delivery, risk management, stakeholder updates, and follow-up iterations.
- Provide technical feedback, clarify ambiguity, and contribute to teammates’ development.
Requirements
- 5+ years of professional experience building and shipping production software, including meaningful security-relevant work.
- Hands-on full-stack experience with Java, Spring, Python, React, or Angular.
- Deep AWS or GCP experience, including cloud identity and access primitives and practical knowledge of permission-model failures.
- Production identity and access management experience with RBAC or ABAC, SSO, SAML federation, OIDC, OAuth 2.0, and token and credential lifecycle management.
- Ability to root-cause complex security issues through detailed analysis.
- Experience automating control testing, evidence collection, or compliance workflows.
- Datastore and database experience, including schema and query design at scale and under latency constraints.
- Experience using AI developer tools and agents, including validating their output before release.
- Strong written and verbal communication skills for explaining authorization decisions and security trade-offs to technical and non-technical audiences.
- BS/MS in Computer Science or a related field, or equivalent practical experience.
- Preferred experience includes OPA and Rego, AWS Cedar, Zanzibar-style authorization, XACML, cloud entitlement management, identity governance, SOX controls, threat modeling, machine and non-human identity, AI-native applications, LLMs, agent frameworks, Agile, Scrum, Extreme Programming, GitHub portfolios, or open source contributions.
Benefits
- Competitive compensation package with pay-for-performance rewards.
- Potential eligibility for cash bonus, equity rewards, and benefits under applicable plans and programs.
Tech Stack
Categories
About Intuit
Intuit is a global technology platform that helps our customers and communities overcome their most important financial challenges. Serving millions of customers worldwide with TurboTax, QuickBooks, Credit Karma and Mailchimp, we believe that everyone should have the opportunity to prosper and we work tirelessly to find new, innovative ways to deliver on this belief. We encourage conversations on this page and will not delete comments that follow our terms of use. In order to keep this a safe community, the below posts may be removed: Repeated posts of the same content, spam or posts from fake accounts or profiles, offensive language or material, threats to others in the community, posts deliberately aimed to have a negative effect on the community or conversations.