What you’ll do
Technical Roadmap & Vision: Define and deliver the multi-year architecture and strategy for Uber's identity-first Zero Trust stack, translating company-wide goals into organization, team, and project-level technical direction across multiple engineering organizations.
Engineer at Core: Design, prototype, and ship secure systems. Stay hands-on in the hardest problems — the architecture you set is one you can build, review, and debug.
Engineering Excellence: Set and hold the technical bar across the security foundation organization through design review, architectural standards, and written technical direction. Elevate the performance of engineers across organizations through mentorship and sponsorship of staff-and-above ICs.
Reliability of Tier-0 Trust Infrastructure: Identity, policy decision, and certificate services sit in the critical path of production traffic; their failure is a company-wide failure. Own availability, failure-mode, and blast-radius design for these systems, convert incident learnings into architectural fixes, and govern the safe rollout of enforcement changes.
Identity for the Agentic Era: Extend the identity and authorization plane to AI agents as first-class principals — agent identity and attestation, delegated authorization and token exchange for agent-to-agent and agent-to-service traffic, risk-adaptive control over agent actions, and runtime attribution of every agent action back to an accountable human or service owner.
Drive Fleet-Wide Adoption: Lead cross-organization migrations that retire legacy trust primitives — static secrets, long-lived credentials, implicit network trust — in favor of short-lived, attested identity, and see them through to measurable fleet coverage under strict availability constraints.
Enable New Business Verticals: Ensure the identity foundation extends cleanly to new business lines, acquisitions, cloud estates, and SaaS and partner boundaries, with a consistent model for non-human identity and least privilege.
Cross-Functional Collaboration: Partner with infrastructure, AI platform, product engineering, and business teams to integrate security seamlessly, and represent the identity and Zero Trust strategy to executive stakeholders. Influence, not authority, is the instrument.
What you’ll need
BS Degree in Computer Science or related field.
10+ years of experience in software engineering,with deep specialization in cybersecurity.
Proven track record as a technical leader—driving design, influencing architecture, and mentoring senior engineers across organizational boundaries
Expert knowledge in one or more of: identity and access management, zero trust architecture, secure systems design, applied cryptography, authorization and policy systems, or agentic/AI security
Hands-on experience owning highly available, Tier-1 distributed systems in the critical path of production traffic — design, operation, and incident response
Strong coding skills in languages such as Go, Python, Java, C++, or Rust
Experience building scalable, reliable, and secure infrastructure at large scale
Preferred Qualifications
Advanced degree (Master’s or PhD) in Computer Science, Engineering, or a related field.
Experience designing or operating Zero Trust architectures at scale: SPIFFE/SPIRE or equivalent workload identity, service mesh authentication, centralized policy decision services, device trust, and secretless service-to-service authentication.
Depth in authentication and authorization protocols: OAuth 2.0/OIDC, SAML, SCIM, mutual TLS, and PKI/certificate lifecycle management.
Experience securing AI/agentic systems — agent identity, delegated authorization, guardrails, sandbox isolation, or runtime attribution for autonomous workloads.
Experience with non-human identity at scale: service accounts, API keys, cloud IAM hardening, and credential lifecycle across multi-cloud and SaaS estates.
Experience leading large-scale credential or authorization migrations across a heterogeneous fleet.
Contributions to open standards or the external security community (specifications, talks, publications, open source).
Advanced degree in Computer Science or a related field.
For San Francisco, CA-based roles: The base salary range for this role is USD $302,000 per year - USD $336,000 per year.
For Seattle, WA-based roles: The base salary range for this role is USD $302,000 per year - USD $336,000 per year.
For Sunnyvale, CA-based roles: The base salary range for this role is USD $302,000 per year - USD $336,000 per year.
For all US locations, you will be eligible to participate in Uber's bonus program, and may be offered an equity award & other types of comp. All full-time employees are eligible to participate in a 401(k) plan. You will also be eligible for various benefits.
