Staff Security Engineer, Identity

ABOUT THE TEAM

The Tide Security Engineering team is made up of three core areas: Product Security, Identity, Threat Detection & Response

Product Security consists of application and cloud security experts. Their mission is to protect the products we build, covering everything from secure design reviews to threat modelling and penetration testing, ensuring security is embedded from the ground up.

Threat Detection & Response focuses on protecting the company by building a robust detection and automation platform. We’re proactive in our defence, constantly hacking ourselves to improve our security posture and staying ahead of emerging threats. Our goal is to make Tide resilient against the ever-evolving threat landscape.

Identity (this role!) is responsible for Identity across Tide. Everything from managing Okta to provisioning modern access control patterns for newly deployed applications is within scope of this team. The team uses strategies like zero trust, Just-in-Time access, and granular access controls to safeguard our internal operations.

While each area has its own focus, collaboration is key – it's why we share the same Slack channel and hold our standups together as one cohesive team, ensuring alignment and seamless communication across all security functions.

ABOUT THE ROLE

As a Staff Security Engineer, Identity team you’ll be:

• Championing Identity across Tide; from integrating new applications with Okta to creating Just-in-Time access rules for existing applications
• Collaborating very closely with business and technology teams to define and implement least-privilege, modern access controls and patterns
• Ensuring our Identity estate (Okta and beyond) adheres to best practices. Today it may mean deploying phishing-resistant MFA; tomorrow, it could involve adopting innovative access technologies
• Automating manual, inefficient processes to streamline identity management workflows

WHAT WE ARE LOOKING FOR

• Strong expertise with modern Identity Providers such as Okta or similar platforms
• Deep understanding of authentication protocols such as OAuth 2.0, SAML and OIDC
• Strong hands-on experience writing Terraform
• Experience in scripting and automation to solve complex identity challenges; bonus points if you have a repository showcasing your work
• A passion for mentoring and sharing knowledge with your team
• Hands-on attitude and the ability to drive solutions to completion
• Excellent spoken and written communication skills

WHAT YOU’LL GET IN RETURN

• Self & Family Health Insurance
• Term & Life Insurance
• OPD Benefits
• Mental wellbeing through Plumm
• Learning & Development Budget
• WFH Setup allowance
• 15 days of Privilege leaves
• 12 days of Casual leaves
• 12 days of Sick leaves
• 3 paid days off for volunteering or L&D activities
• Stock Options

TIDE IS A PLACE FOR EVERYONE

At Tide, we believe that we can only succeed if we let our differences enrich our culture. Our Tideans come from a variety of backgrounds and experience levels. We consider everyone irrespective of their ethnicity, religion, sexual orientation, gender identity, family or parental status, national origin, veteran, neurodiversity or differently-abled status. We celebrate diversity in our workforce as a cornerstone of our success. Our commitment to a broad spectrum of ideas and backgrounds is what enables us to build products that resonate with our members’ diverse needs and lives. 

We are One Team and foster a transparent and inclusive environment, where everyone’s voice is heard.

At Tide, we thrive on diversity, embracing various backgrounds and experiences. We welcome all individuals regardless of ethnicity, religion, sexual orientation, gender identity, or disability. Our inclusive culture is key to our success, helping us build products that meet our members' diverse needs. We are One Team, committed to transparency and ensuring everyone’s voice is heard.

You personal data will be processed by Tide for recruitment purposes and in accordance with Tide's Recruitment Privacy Notice.