Security Engineer, Identity

Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

The Enterprise Identity team manages identity risks for Alphabet including how we onboard, authenticate and ensure that only the right people gain access to the sensitive data at Google. This includes how we use physical security tokens, badges, trusted platform modules, single sign on, identity verification, biometrics and other controls across all of our environments including corporate, production and cloud, as well as with all our third party connections.

Our work underpins the daily experience of every Googler and is critical in defending against advanced threats. We set identity policies, engineer solutions, and partner internally on hardware development. We also collaborate with external standards bodies and with vendors on new innovative solutions to move the industry forward.

You will be part of the team designing, building, and implementing robust security controls that enforce identity policy across Google’s corporate and production environments.

The US base salary range for this full-time position is $141,000-$202,000 + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.

Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits. Learn more about benefits at Google.

Responsibilities

• Work on the design and implementation of security controls and infrastructure for identity and account lifecycle management, ensuring robust protection for Google’s user and system accounts.
  
• Apply your deep understanding of security technologies (e.g., authentication, SSO, FIDO, or IAM) to identify vulnerabilities and improve the security posture of Google’s identity systems.
  
• Partner with software engineers, product managers, and other security teams to prioritize and execute engineering efforts that address critical risks and meet business objectives.
  
• Contribute to key design and policy decisions, effectively communicating technical security risks to leadership and partner teams to drive remediation.
  
• Identify complex security problems within the identity domain and define the technical roadmap to address them in alignment with team goals.

Minimum qualifications:

• Bachelor's degree or equivalent practical experience.
  
• 2 years of experience with security engineering, computer and network security, and security protocols.
• 2 years of coding experience in one or more general purpose languages.
  

Preferred qualifications:

• 2 years of experience with security architecture, design and risk analysis of complex systems.
• Experience with identity and access management (IAM) standards and protocols (e.g., OAuth, OIDC, SAML, FIDO, X.509).
• Experience designing and securing distributed systems or cloud infrastructure.
• Strong written and verbal communication skills, with the ability to explain complex security concepts to non-technical audiences.