Own software engineering projects end-to-end on a highly autonomous, horizontally integrated team with a lot of leverage. This is a code-forward role!

Define what identity means for autonomous agents and other non-human actors at Discord (how they're provisioned, scoped, authenticated, authorized, and audited). As the role of these actors grows, and create primitives to implement that vision.

Build and evolve Access, Discord's employee authorization platform, to make permissions discoverable, role-based, least privilege, and self-serve; check out our blog post to learn more!

Design and harden our Zero Trust architecture, spanning human and service-to-service auth*n for Discord’s internal tooling.

Automate continuous permission right-sizing in the spirit of least privilege.

Develop and apply secure baselines for cloud identity, and help secure our software supply chain from the dev environment through CI/CD and into production.

Consult on risk assessments, architectural designs, threat models, code reviews, and more, pragmatically balancing security with other business considerations.

Example projects

Integrate service-to-service and agent-to-service authentication and authorization as out-of-the-box features in Discord's internal developer platform.

Build out service identity provisioning using PKI and mTLS, so services can authenticate each other without shared secrets.

Evaluate or extend infrastructure access tooling such as Teleport for short-lived, auditable access to hosts, databases, and internal systems.

Improve how secrets are issued, rotated, and scoped across our infrastructure.

Senior Platform Security Engineer

Responsibilities

Qualification

Required

Preferred

Benefits

Company

Discord

More roles at Discord