The opportunity
GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation.
What you'll do
Design comprehensive identity and AI access solutions that scale with our: business growth, from AI agent governance frameworks to privileged access workflows that eliminate standing access through just-in-time provisioning
Replace low-code automation with engineered services, migrating our: existingiPaaS automation to Python services on GCP Cloud Run with source control, tests, CI and observability
Codify our identity platforms in Terraform/OpenTofu/Pulumi , leading the: migration of Okta, Lumos, and our NHI platform from click-ops to peer-reviewed infrastructure-as-code, with a focus on global critical policies
Help re-architect identity and access across our GCP and AWS organizations,: partnering on resource hierarchy design, secure-by-default guardrails (org policies, SCPs, permission boundaries), workload identity federation, and a credible path to least privilege for both human and workload access
Lead identity and access engineering for our enterprise AI platforms: including administration, SSO and SCIM integration, audit logging, data controls, and policy enforcement for Claude (web, Claude Code, Cowork) and adjacent tools
Pioneer non-human identity governance by designing monitoring and management: solutions for service accounts, API keys, certificates, AI agents, and MCP integrations, and leading deployment, integration, and operationalization of our NHI platform across the SaaS estate
What they're looking for
- Drive cross-functional initiatives with Security, IT, Engineering, Enterprise: AI, and the Office of the CIO to extract requirements from ambiguous business needs and translate them into actionable technical specifications
- Mentor senior and intermediate engineers on technical implementation and: strategic thinking, helping them develop expertise in modern identity and AI security practices
- Extensive IAM experience designing and implementing enterprise-scale: solutions, with demonstrated time at a Staff or senior IC level
- Expert-level Okta expertise including Identity Engine, advanced: authentication policies, lifecycle workflows, and API automation
