Job Opportunities API

Veeam is the Data and AI Trust Company, specializing in helping organizations ensure their data and AI are fully understood, secured, and resilient to enable the acceleration of safe AI at scale. As the market leader in both data resilience and data security posture management, Veeam is built for the convergence of identity, data, security, and AI risk. Headquartered in Seattle with offices in more than 30 countries, Veeam protects over 550,000 customers worldwide, who trust Veeam to keep their businesses running. Join us as we go fearlessly forward together, growing, learning, and making a real impact for some of the world’s biggest brands. About the Role We’re  looking for a Staff Security Engineer to define and drive the  authentica tion an d au thoriz ation  architec ture  for Veeam Data Cloud (VDC) , our cloud-native SaaS platform. This role is centered on evaluating, defining, and evolving our  authorization model - including  RBAC  and  API access control  across VDC services and teams.  You’ll  partner closely with product and platform engineering to ensure access is consistently designed, implemented, and enforced across the product.     We provide secure data protection services on AWS, Azure, and GCP, integrating with platforms like Microsoft 365 and Salesforce for customers in regulated industries What You’ll Do Define end-to-end security architecture for  identity and authorization  across VDC (control plane and data plane)   Evaluate and define  authorization standards  for multi-tenant SaaS, including  RBAC/ABAC patterns ,  API authorization , and consistent permission modeling across services   Define role/permission models for customer users, customer admins, internal support/admin access, and service-to-service authorization   Design and standardize identity and authorization for  agents and connectors  running in customer environments (token/scopes, least privilege, rotation)   Define shared security capabilities like  tenant isolation, policy enforcement, and rate limiting   Set standards for  secure logging and telemetry  for authentication and authorization   Turn repeat security issues into  reusable guardrails and shared services   Support compliance work (e.g.,  SOC 2, FedRAMP-style, IRAP ) through lasting design improvements   Be hands-on in implementation: write code, perform code reviews, and submit PRs to VDC repositories; at times, embed with product teams to deliver authorization changes end-to-end   Join design reviews and help teams adopt standard security patterns   What You’ll Bring Proven background as a  Security Architect / Senior Security Engineer / Software Engineering  for  cloudnative, multitenant SaaS   Strong, hands-on expertise integrating and operating  Okta ,  Auth0 , and/or  Keycloak  from a software engineering perspective (SDKs/APIs, OIDC/OAuth flows, token handling, automation)   Strong software engineering background: proficiency in one or more of C#/.NET, Go, Java, Python, or TypeScript Deep knowledge of  authorization  concepts and implementation:  RBAC , permission modeling, policy enforcement,  OAuth2/OIDC , JWT, mTLS, workload identities, tenant isolation, and secure API design   Strong  Azure security architecture  knowledge (Entra ID, AKS, networking, monitoring, hardening)   Experience turning vulnerability patterns for AAA into  scalable platform solutions   Strong communication skills in English; comfortable in distributed teams   Bonus Skills Building shared auth