WorkOS
Software Engineer - Infrastructure Security
United States & Canada · Senior
Sponsorship not specifiedDetected 30 days ago
KubernetesPlatform Engineering
Stay score
odds of building a lasting career here
37Risky
Cap-exempt (no lottery)0
Sponsors this role80
Entry-level history0
PERM / green-card track0
Lottery odds40
Fits your clock70
Thin sponsorship signal and lottery-bound. A low-probability bet with your clock running. Prioritize cap-exempt roles and proven entry-level sponsors first.
Lottery odds assume a STEM candidate.
Personalize to your clock →Employer immigration record
from this employer's Department of Labor filings
Files H-1B transfers
3 transfer filings in the last year, covering 3 workers. Median labor-condition decision: 7 days. An employer that already files transfers is one that can take over an existing H-1B.
Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.
Community outcomes
No reports yet — be the first to help the next applicant.
About the role
- We recently raised a $100M Series C, valuing the company at $2B, led by Meritech and Sapphire with participation from Greenoaks, Craft, Abstract, and Audacious.
- As AI reshapes software, WorkOS is at the frontier of Human and Agent Authentication, Identity, and Access Control helping companies answer a new critical question: who are your agents, and what are they allowed to do?
Responsibilities
- Bring identity-based authentication to internal services. Work with the owners of major internal dependencies to support identity certificates, make them the golden path for newly onboarding applications, and drive migration of existing ones.
- Replace all static passwords and service tokens with short-lived identity credentials, and build identity-authenticated egress proxies and API abstractions that inject and automatically rotate managed secrets for the external dependencies that still require them.
- Unify authorization. Build a single interface and framework through which authorization policies are centrally managed and enforced.
- Build workload identity infrastructure.
- A platform builder. You love building infrastructure that other engineers rely on every day, and you sweat the developer experience details that make adoption effortless.
- A strong partner to engineering. You build trust with engineers by understanding their priorities and making security frictionless.
Requirements
- 5+ years of experience in software engineering, with a focus on security-related platform, infrastructure, or distributed systems.
- Strong working knowledge of secrets management, fine-grained authorization, and workload identity systems.
- Familiarity with the Kubernetes ecosystem and authentication/authorization technologies such as JWTs, X.509 certificates, PKI, cert-manager, SPIFFE/SPIRE, and OPA.
- Experience building and operating production infrastructure that other teams depend on, with attention to availability and failure modes.
- Proven ability to drive cross-team adoption of platform capabilities or lead large-scale migrations.
- Benefits and Perks (US Only) 💖
- At WorkOS, we offer resources that emphasize personal and familial well-being. We offer healthcare coverage for you and your family, including medical, dental, and vision. We offer parental leave, paid-time off and fully remote working arrangements.
- 401k matching
- Competitive Equity
- Healthcare, dental and vision coverage
- FSA, ST/LT Disability, Voluntary Life
- Carrot fertility benefits
- 20 days paid vacation + 10 holidays + unlimited sick leave
Skills
- About WorkOS 🚀
- WorkOS powers enterprise features for many of the fastest-growing AI companies, including OpenAI, Cursor, and Perplexity, Sierra, and Plaid.
- As AI reshapes software, WorkOS is at the frontier of Human and Agent Authentication,
- Identity, and Access Control helping companies answer a new critical question:
- who are your agents, and what are they allowed to do?
Benefits
- Commuter benefits for hybrid employees in SF/NYC
Company info
- WHO WE'RE LOOKING FOR - A platform builder.
- Make short-lived identity credentials a default part of every application's runtime environment, in partnership with application platform owners. - Bring identity-based authentication to internal services.
- We offer healthcare coverage for you and your family, including medical, dental, and vision.
- Build workload identity infrastructure. Make short-lived identity credentials a default part of every application's runtime environment, in partnership with application platform owners.
- Make short-lived identity credentials a default part of every application's runtime environment, in partnership with application platform owners.
Equal opportunity
- Employer
- WorkOS is an equal opportunity employer, committed to diversity and inclusiveness. We will consider all qualified applicants without regard to race, color, nationality, gender, gender identity or expression, sexual orientation, religion, disability or age.
- We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
- WorkOS is an equal opportunity employer, committed to diversity and inclusiveness.
This listing is sourced directly from WorkOS's careers page and normalized into a canonical job model.