Security Engineer - Cybersecurity IAM (Hybrid, Bucharest)
CrowdStrike1 day ago
Bucharest, RomaniaSenior
Responsibilities
- Drive IAM lifecycle operations and support emergency incident response for the product platform.
- Design, implement, and maintain access control solutions for a global multi-cloud platform.
- Ensure the performance, reliability, and usability of access systems across thousands of services and users.
- Manage identity and access security risk and governance, including least-privilege controls, threat modeling, verification, and audits.
- Develop scripting and automation solutions for access operations and integrations.
- Advise cross-functional product and engineering stakeholders on security alignment.
- Stay current with IAM and cybersecurity advancements to improve the organization’s security posture.
Requirements
- Expertise in cloud IAM services such as AWS IAM, Azure Entra, GCP IAM, and OCI IAM.
- Experience deploying access provisioning and governance systems, including just-in-time access, self-service, zero trust, and service mesh solutions.
- Strong understanding of SSO, federation, directory services, MFA, and authentication protocols including SAML, OIDC, and Kerberos.
- Proficiency in Python, Bash, or Go for scripting and automation.
- Experience operating at scale across complex services and user environments.
- Knowledge of security fundamentals, threat modeling, and risk management.
- Strong analytical and critical-thinking skills for solving complex security scenarios.
- Proven experience using AI technologies to improve decision-making, workflows, efficiency, and business outcomes.
- Experience running projects with diverse stakeholders is preferred.
- Experience with cloud-scale, business-critical Linux or Unix-like environments is preferred.
- Familiarity with Terraform, SaltStack, or Ansible is preferred.
- Experience with Microsoft Active Directory design and management is preferred.
- Experience with NIST, ISO 27001, SOC 2, or GDPR compliance frameworks is preferred.
- Familiarity with cloud security and securing cloud-based applications and services across AWS, GCP, OCI, or Azure is preferred.
Benefits
- Compensation and equity awards are provided, with the posting describing them as market-leading and competitive.
- Comprehensive physical and mental wellness programs.
- Competitive vacation and holidays.
- Paid parental and adoption leave.
- Professional development opportunities for employees at all levels and roles.
- Employee networks, geographic neighborhood groups, and volunteer opportunities.
- Vibrant office culture with world-class amenities.
- Hybrid work arrangement in Bucharest; the posting also includes a remote listing marker.
About CrowdStrike
CrowdStrike builds the Falcon cloud-native security platform used by enterprises and governments to protect endpoints, cloud workloads, identities, and data with EDR, next-generation antivirus, threat intelligence, and managed threat hunting. Founded in 2011 and publicly traded on NASDAQ as CRWD, the company sells primarily by subscription and also provides incident response services; its systems ingest and analyze nearly 3 trillion security events per day across customer environments.