Principal Engineer, Security & Access Management (Agentic AI)

About the Role

Key Responsibilities

• Lead the technical direction and architecture for the security and access management team, including decisions on technology stacks and design patterns.
• Mentor and guide security engineers, fostering a culture of innovation, collaboration, and excellence.
• Translate the team's vision and business requirements into a clear technical roadmap and tangible deliverables.
• Collaborate with cross-functional teams including product, engineering, and compliance to deliver secure solutions.
• Design, build, and maintain robust, scalable, and secure authentication and authorization services using protocols like OAuth 2.0 and OpenID Connect.
• Serve as the in-house expert on identity concepts and implementation details.
• Pioneer security strategies for the Agentic AI platform, addressing challenges and threats specific to AI systems.
• Conduct threat modeling for AI agents and multi-agent systems to identify and mitigate risks such as prompt injection, model exploitation, and data poisoning.
• Design and implement security controls throughout the AI model lifecycle, from data ingress to deployment and inference.
• Design and implement adversarial testing strategies for DataRobot's AI platform.
• Participate in security community activities and contribute to RFC documents related to authentication, authorization, or security best practices.
• Ensure security practices and services are compliant with industry standards and regulations, interfacing with auditors for certifications like FedRAMP, HIPAA, and ISO 27001.

Requirements

• Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent practical experience.
• 8+ years of experience in software engineering, with at least 4 years in a security-focused role.
• Deep, hands-on expertise with OAuth 2.0 and OpenID Connect, including understanding of specifications and grant types.
• Proven experience designing and building highly scalable, distributed, and fault-tolerant systems.
• Strong programming skills in languages such as Go, Python, Java, or Rust.
• Excellent leadership and communication skills, capable of articulating complex technical concepts to diverse audiences.
• Experience with maintaining software in on-premise or self-managed environments.

Nice to Have

• Master's degree or PhD in a relevant field.
• Experience authoring, reviewing, or contributing to IETF RFCs or similar standards.
• Experience securing AI/ML systems, especially Agentic AI.
• Familiarity with identity and access management standards like SAML, SCIM, and WebAuthn.
• Experience with cloud-native security and identity services (e.g., AWS IAM, Google Cloud Identity, Azure AD).
• Contributions to open-source projects.
• Ability to meet U.S. Government contract requirements, including U.S. Citizenship.

Benefits & Perks

• Medical, Dental & Vision Insurance
• Flexible Time Off Program
• Paid Holidays
• Paid Parental Leave
• Global Employee Assistance Program (EAP)
• Additional benefits depending on location and legal requirements