Staff, Security Engineer (Authentication & Access) [L6-2] (Ads, Marketing, Sales and CX Security Architecture)

The role

A Security Architect will design, build, and scale secure enterprise platforms and services. You will work across identity and access management, authentication, authorization, cryptography, and data protection domains.

What you will do

• Design and implement security architectures for enterprise platforms and distributed systems.
• Partner with engineering, infrastructure, and platform teams to integrate security requirements.
• Develop secure solutions for IAM, authentication, authorization, and cryptography.
• Design and improve authentication and authorization services using OAuth 2.0 and OpenID Connect.
• Build and automate security controls and tooling using software engineering best practices.
• Review system architectures and provide security guidance to engineering teams.
• Contribute to the design of enterprise IAM platforms and access control frameworks.
• Establish and promote security best practices for system design and secrets management.
• Identify security gaps and recommend solutions balancing security and business needs.
• Develop prototypes and security automation solutions using Python.

Required qualifications

• Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, or a related technical field.
• 10+ years of experience in security engineering, security architecture, platform engineering, software engineering, or related technical disciplines.
• Expertise in one or more: IAM, Authentication and Authorization, OAuth 2.0, OpenID Connect (OIDC), Federation, Applied Cryptography and Key Management, Credential and Secrets Management, Public Key In
• Strong understanding of secure architecture principles for cloud-native and distributed systems.
• Hands-on software development experience with Python and security automation.
• Experience designing, implementing, or supporting enterprise security platforms and services.
• Ability to analyze complex technical problems and deliver practical, scalable solutions.
• Strong written and verbal communication skills.

Nice to have

• Experience building or operating enterprise-scale IAM, Identity Governance, Access Management, or Zero Trust solutions.
• Experience designing security architectures for cloud environments such as AWS, GCP, or Azure.
• Knowledge of modern secrets management, credential lifecycle management, and privileged access management solutions.
• Experience with PKI design, certificate management, or cryptographic service platforms.
• Experience developing security platforms, internal developer tooling, or security automation frameworks.
• Understanding of threat modeling, security monitoring, intrusion detection, or incident response concepts.
• Experience working in large-scale technology companies or rapidly growing engineering organizations.
• Industry certifications such as CISSP, CCSP, ISSAP, SABSA, TOGAF, or equivalent certifications.
• Experience contributing to security standards, architectural reviews, or security-by-design initiatives.

Before you apply

• This posting is exclusively for internal employees.
• Complete the attached Internal Transfer Request Form.
• Submit via your Coupang email address.

About the company

Coupang aims to wow customers by making shopping, eating, and living easier. They offer a startup culture with the resources of a large global public company.