Staff Identity Engineer

ABOUT THE TEAM

The Tide Security Engineering team is made up of three core areas: Product Security, Identity, Threat Detection & Response

Product Security consists of application and cloud security experts. Their mission is to protect the products we build, covering everything from secure design reviews to threat modelling and penetration testing, ensuring security is embedded from the ground up.

Threat Detection & Response focuses on protecting the company by building a robust detection and automation platform. We're proactive in our defence, constantly hacking ourselves to improve our security posture and staying ahead of emerging threats. Our goal is to make Tide resilient against the ever-evolving threat landscape.

Identity (this role!) is responsible for Identity across Tide. Everything from managing Okta to provisioning modern access control patterns for newly deployed applications is within scope of this team. The team uses strategies like zero trust, Just-in-Time access, and granular access controls to safeguard our internal operations.

While each area has its own focus, collaboration is key – it's why we share the same Slack channel and hold our standups together as one cohesive team, ensuring alignment and seamless communication across all security functions.

ABOUT THE ROLE

As a Staff Identity Engineer, team you'll be:

• Championing Identity across Tide; from integrating new applications with Okta to creating Just-in-Time access rules for existing applications
• Collaborating very closely with business and technology teams to define and implement least-privilege, modern access controls and patterns
• Ensuring our Identity estate (Okta and beyond) adheres to best practices. Today it may mean deploying phishing-resistant MFA; tomorrow, it could involve adopting innovative access technologies
• Automating manual, inefficient processes to streamline identity management workflows

WHAT WE ARE LOOKING FOR

• Strong expertise with modern Identity Providers such as Okta or similar platforms
• Deep understanding of authentication protocols such as OAuth 2.0, SAML and OIDC
• Strong hands-on experience writing Terraform
• Experience in scripting and automation to solve complex identity challenges; bonus points if you have a repository showcasing your work
• A passion for mentoring and sharing knowledge with your team
• Hands-on attitude and the ability to drive solutions to completion
• Excellent spoken and written communication skills

WHAT YOU'LL GET IN RETURN

Our location-specific employee benefits are designed to cater to the unique needs of Tideans:

• Self & Family Health Insurance
• Term & Life Insurance
• OPD Benefits
• Mental wellbeing through Plumm
• Learning & Development Budget
• WFH Setup allowance
• 15 days of Privilege leaves
• 12 days of Casual leaves
• 12 days of Sick leaves
• 3 paid days off for volunteering or L&D activities
• Stock Options

TIDEAN WAYS OF WORKING

At Tide, we champion a flexible workplace model that supports both in-person and remote work to cater to the specific needs of our different teams.

While remote work is supported, we believe in the power of face-to-face interactions to foster team spirit and collaboration. Our offices are designed as hubs for innovation and team-building, where we encourage regular in-person gatherings to foster a strong sense of community. #LI-AC1 #LI-Remote