Staff Security Engineer (IAM)

The role

This senior individual-contributor role supports a multi-year IAM security strategy. You will direct execution across multiple engineering teams and ensure identity and access controls meet security, regulatory, and operational requirements.

What you will do

• Define, communicate, and execute a multi-year security strategy in the IAM field.
• Lead organization-wide authentication migrations across multiple surfaces and device ecosystems.
• Design and maintain core identity infrastructure including enterprise Identity Provider, PKI, and mTLS.
• Translate least-privilege access into a measurable, organization-wide program.
• Design and maintain a security engineering framework.
• Lead technical incident response for identity and access security events.
• Design and facilitate large-scale preparedness exercises.
• Provide technical mentorship and coaching to senior engineers.
• Serve as the technical authority in engagements with Legal, Compliance, internal audit, and external regulators.

Required qualifications

• Solid professional experience in security engineering, with a concentration in identity, authentication, or access management.
• Demonstrated track record of leading complex, multi-year security programs.
• Expert-level knowledge of IAM and authentication protocols: OIDC, OAuth 2.0, SAML 2.0, FIDO2/WebAuthn, mTLS, and Public Key Infrastructure (PKI).
• Proficiency in software engineering: ability to produce, review, and reason about production-quality code in at least one general-purpose programming language.
• Demonstrated ability to model identity-related threat scenarios and design controls.
• Commitment to security as an organizational capability that enables business outcomes.
• Experience communicating technical risk assessments and strategic recommendations to senior non-technical stakeholders.

Nice to have

• Experience operating within a financial services institution or similarly regulated environment.
• Hands-on experience administering or integrating with an enterprise Identity Provider at scale, particularly Okta, or Keycloak.
• Experience designing and enforcing security controls for third-party, BPO, or partner environments.
• Experience leading organizational adoption of Zero Trust architecture.
• Contributions to the broader security community.

Benefits

• Opportunity of earning equity at Nu
• Medical Insurance
• Dental and Vision Insurance
• Life Insurance and AD&D
• Extended maternity and paternity leaves
• Nucleo - Our learning platform of courses
• NuLanguage - Our language learning program
• NuCare - Our mental health and wellness assistance program
• 401K
• Saving Plans - Health Saving Account and Flexible Spending Account
• Work-from-home Allowance
• Relocation Assistance Package, if applicable

Before you apply

• Recruitment process may involve the use of artificial intelligence–enabled tools.
• Nu does not provide individualized technical feedback.

About the company

Nu serves more than 140 million customers with a mission to fight complexity and empower people. The company uses proprietary technology and data at scale to power its digital platform.