CoinbaseOfficial careers listing

Posted 1mo ago

Senior Staff Software Engineer, Platform - IAM

Pay

USD 253,895–298,700

Location

Remote - USA

Remote

H-1B approvals FY2025: 25 (USCIS)

Initial H-1B petitions USCIS approved for COINBASE INC (CA) in fiscal year 2025, from the H-1B Employer Data Hub. It says what the employer has done, not whether a given role will be sponsored.

Official sourceJobs at employers with H-1B approvals in the United States

Skills this role screens for

GoRestAWSSecurityLeadershipCommunicationFinance

Opens on Coinbase's site. Sign in first and we keep it in your pipeline.

Still studying?Paid software internships in the United States open now

Responsibilities

What you'll do

  • Own the multi-year technical strategy for IAM end to end, unifying workforce, AI agent, and service/workload identity under a common model.
  • Drive architecture decisions across multiple pods and teams, establishing standards, review bars, and integration contracts.
  • Build the adoption strategy for 700+ systems, including sequencing, migration paths, and build-vs-buy decisions.
  • Partner with Security, Compliance, IT, Infrastructure, and product engineering leadership to translate audit and regulatory requirements into automated controls.
  • Lead the data model and tooling to answer "who has access to what, and why" across heterogeneous estates.
  • Grow the technical bench by mentoring staff and senior engineers and raising the org's depth in identity as a domain.

Requirements

What they're looking for

  • 12+ years of software engineering experience.
  • Track record as the most senior technical leader on a platform spanning multiple teams with multi-year architecture driven to adoption.
  • Deep IAM expertise across more than one domain (workforce identity, authorization, access lifecycle, or non-human identity).
  • Substantive experience in service or workload identity (service-to-service auth, workload identity federation, or machine credential management at scale).
  • Production Go experience and distributed systems design on AWS.
  • Fluency in identity protocols and standards (OAuth 2.0, OIDC, SAML, SCIM, and workload identity patterns).
  • Proven influence without authority at senior levels, changing technical direction of teams/orgs outside own.
  • Secured leadership alignment on ambiguous, org-wide access-risk problems.
  • Ability to translate audit and regulatory requirements into automated technical controls.
  • Clear written and verbal communication framing complex identity problems for executive audiences.
  • Utilizes generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements.
Full description from the employer

Ready to do the most impactful work of your career? At Coinbase, we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase. We're hiring a Senior Staff Software Engineer (Uber Tech Lead) for Identity & Access Management within Platform and own the technical strategy that unifies human, AI agent, service, and workload identity into one coherent platform. IAM is a distributed problem across 700+ internal systems that no central team can implement alone, so this platform must make access consistent, visible, provable, and efficient across every identity type. You'll set architecture across multiple pods, drive adoption with hundreds of engineering teams, and act as one of the most senior technical voices for identity and access management at Coinbase. What you'll do: • Own the multi-year technical strategy for IAM end to end, including the architecture that unifies workforce, AI agent, and service/workload identity under a common model with shared primitives for authentication, authorization, provisioning, and governance. • Drive architecture decisions across multiple pods and teams you don't manage - establishing the standards, review bars, and integration contracts the rest of engineering builds against. • Build the adoption strategy for 700+ systems, including sequencing, migration paths, and build-vs-buy decisions that determine what we own versus integrate. • Partner with Security, Compliance, IT, Infrastructure, and product engineering leadership to translate audit and regulatory requirements (UAR, SOX, SOC 2) into automated controls and self-generating evidence. • Lead the data model and tooling that answer "who has access to what, and why" across a heterogeneous estate, reducing standing privilege while making the secure path the fast path. • Grow the technical bench by mentoring staff and senior engineers and raising the org's depth in identity as a domain. Required Skills and Experience: • 12+ years of software engineering experience, including a track record as the most senior technical leader on a platform spanning multiple teams with multi-year architecture driven to adoption across dozens of consuming teams. • Deep IAM expertise across more than one domain (workforce identity, authorization, access lifecycle, or non-human identity) with substantive experience in service or workload identity - service-to-service auth, workload identity federation, or machine credential management at scale. • Production Go experience and distributed systems design on AWS, with fluency in identity protocols and standards (OAuth 2.0, OIDC, SAML, SCIM, and workload identity patterns). • Proven influence without authority at senior levels - you've changed the technical direction of teams and orgs outside your own and secured leadership alignment on ambiguous, org-wide access-risk problems. • Ability to translate audit and regulatory requirements into automated technical controls, with clear written and verbal communication that frames complex identity problems for executive audiences. • Utilizes generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality. Pay Transparency Notice: Base salary varies by location (see range below). Total compensation may also include equity and bonus eligibility, and benefits (medical, dental, vision, 401(k)). Annual base salary range (excluding equity and bonus): $253,895—$298,700 USD • Application Limit: Candidates may submit a maximum of 3 applications within a 6-month period. • Equal Opportunity Employer: Coinbase is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or genetic information. Applicants with criminal histories will be considered consistent with applicable federal, state, and local laws. • US Applicants: View Employee Rights, Know Your Rights, and E-Verify Notice of Participation. • Accommodations: If you are an individual with a disability who needs a reasonable accommodation, email us your request and contact info at accommodations[at]coinbase.com. Need screen reading technology? Click here to download a free compatible screen reader and view the tutorial. • Data Privacy & Arbitration: By submitting your application, you agree to our Candidate Privacy Notice. US applicants: By submitting your application, you agree to Arbitration of Disputes.

Coinbase

Found on the web. You apply on the company's own site

Where this listing comes from

From Coinbase's own careers system (Greenhouse).

insiderOne never charges students to apply. Never pay anyone for an internship. Check an offer you received

Prove Go first

This role screens for Go. Sit a ten-minute live challenge, get a signed receipt, and the employer sees it verified on your application instead of claimed.

Prove it, then apply

Ask about this role

SCOUT, an AI agent, not a person, answers from this ad, and says so when the ad doesn't cover it. No account, and nothing you type here is kept.

More software roles

Every software role here

insiderOne University

Get certified for roles like this: Python Programming Associate

Free, about 2 hours, ending in a project a person reviews and a certificate any employer can check. Put it on this application and every one after it.

Start the certificationWhat is in it

From the Wire Desk