4 hours ago
Durham, NC, USA +2 moreStaff+
Base Salary
$200k - $240k/yr
Responsibilities
- Define, communicate, and execute a multi-year IAM security strategy aligned with risk, regulatory, and business objectives.
- Lead organization-wide authentication migrations across browser, operating-system login, CLI, and API surfaces.
- Design and maintain enterprise identity infrastructure, PKI and X.509 certificate automation, mutual TLS, and credential management systems.
- Create measurable organization-wide least-privilege access programs and accountability structures.
- Design and maintain durable security engineering frameworks encompassing technical controls, policies, incentives, and assurance processes.
- Lead technical incident response for identity and access security events and drive root-cause and recurrence-reduction improvements.
- Design and facilitate large-scale IAM preparedness exercises involving engineering, operations, and executives.
- Mentor senior engineers, lead innovative university projects, and participate in hiring and career decisions.
- Serve as technical authority for Legal, Compliance, internal audit, and external regulators on identity and access matters.
Requirements
- Solid professional experience in security engineering focused on identity, authentication, or access management.
- A demonstrated record of leading complex, multi-year security programs through measurable outcomes and organizational or technical challenges.
- Expert knowledge of OIDC, OAuth 2.0, SAML 2.0, FIDO2/WebAuthn, mutual TLS, and PKI.
- Ability to produce, review, and reason about production-quality code in at least one general-purpose programming language.
- Experience modeling identity-related threats, assessing attacker techniques, and designing controls effective under adversarial conditions.
- Experience communicating technical risk assessments and strategic recommendations to executives and regulators.
- Preferred experience in financial services or similarly regulated environments.
- Preferred hands-on experience administering or integrating enterprise Identity Providers at scale, especially Okta or Keycloak.
- Preferred experience securing third-party, BPO, or partner environments without direct control of their infrastructure.
- Preferred experience leading Zero Trust adoption across hybrid and multi-cloud environments.
- Contributions to the security community through research, presentations, open-source tooling, or standards bodies are preferred.
Benefits
- Equity opportunity, medical insurance, dental and vision insurance, life insurance and AD&D, extended maternity and paternity leave, learning and language programs, mental health and wellness assistance, 401K, Health Saving Account and Flexible Spending Account, work-from-home allowance, and relocation assistance where applicable.
- Hybrid work model requiring office attendance 2–3 times per week.
- The listed compensation range is 200–240k plus RSUs.
Categories
About Nubank
Nubank is a digital banking platform for consumers and small businesses in Latin America, offering a no-fee credit card, accounts, payments, lending, and investments through Nu Asset Management. It monetizes via interchange, interest, and product fees within its app-based ecosystem. Founded in 2013 and headquartered in São Paulo, it serves over 100 million customers across Brazil, Mexico, and Colombia and is listed on the NYSE (ticker: NU).