쿠팡

Sr. Security Engineer

Global Security · Bengaluru

채용 상세

Company Introduction   We exist to wow our customers. We know we’re doing the right thing when we hear our customers say, “How did I ever live without Coupang?” Born out of an obsession to make shopping, eating, and living easier than ever, we’re collectively disrupting the multi-billion-dollar e-commerce industry from the ground up. We are one of the fastest-growing e-commerce companies that established an unparalleled reputation for being a dominant and reliable force in South Korean commerce.    We are proud to have the best of both worlds — a startup culture with the resources of a large global public company. This fuels us to continue our growth and launch new services at the speed we have been since our inception. We are all entrepreneurs surrounded by opportunities to drive new initiatives and innovations. At our core, we are bold and ambitious people that like to get our hands dirty and make a hands-on impact. At Coupang, you will see yourself, your colleagues, your team, and the company grow every day.   Our mission to build the future of commerce is real. We push the boundaries of what’s possible to solve problems and break traditional tradeoffs. Join Coupang now to create an epic experience in this always-on, high-tech, and hyper-connected world.     Role Overview We are seeking a highly skilled Senior Security Engineer with 5+ years of hands-on experience in Identity and Access Management (IAM) to design, build, and optimize our enterprise identity infrastructure. In this role, you will lead the implementation and daily administration of key IAM, IGA, and continuous authorization frameworks using Okta, Saviynt, and SGNL. The ideal candidate thrives in a technical, execution-heavy environment, bridges traditional IAM with modern Zero Trust / Continuous Adaptive Trust models, and brings deep technical proficiency in automation, API integrations, and access governance. What You Will Do  As a Senior Security Engineer, you will serve as a subject matter expert in securing identities across our cloud and hybrid environments. You will be directly responsible for architecting, deploying, and maintaining our IAM ecosystem—focusing on Identity Governance and Administration (IGA) via Saviynt, Workforce Identity/SSO/MFA via Okta, and Just-In-Time/Continuous Authorization policies via SGNL. This is a heavily hands-on position requiring technical leadership, API-driven integration work, and practical engineering expertise. <ul data-pm-slice="3 3 []"> <li> Identity Infrastructure Engineering: Architect, deploy, and maintain robust enterprise identity solutions across Okta (Workforce Identity Cloud), Saviynt (IGA), and SGNL (CA / Dynamic Access). </li> <li> Identity Governance & Lifecycle Management: Configure and optimize Saviynt for access requests, dynamic role-based access control (RBAC/ABAC), access certification campaigns, and automated provisioning/deprovisioning workflows. </li> <li> Modern Authentication & SSO: Manage and secure Okta configurations, including SAML 2.0, OIDC, adaptive MFA policies, passwordless authentication, and Directory Integrations (Active Directory/LDAP/HRIS). </li> <li> Fine-Grained & Continuous Authorization: Operationalize SGNL to enforce Zero Trust access, Just-In-Time (JIT) access, and continuous, event-driven authorization policies across enterprise applications and services. </li> <li> API & System Integrations: Develop custom connectors, workflows, and automated pipeline scripts (Python, PowerShell, REST APIs) to integrate target applications into Saviynt and Okta. </li> <li> Incident Response & Threat Mitigation: Collaborate with SOC and Incident Response teams to investigate identity-related threats, privileged access abuses, and anomalous login behavior. </li> <li> Compliance & Audit: Partner with Security Compliance to enforce least-privilege principles, generate audit-ready reporting, and remediate identity risk findings. </li> </ul> <span data-ccp-charstyle="eop" data-ccp-charstyle-defn="{"ObjectId":"920dbcde-2834-5e15-a5fa-062170b236ba|1","ClassId":1073872969,"Properties":[201342446,"1",201342447,"5",201342448,"3",201342449,"1",469777841,"맑은 고딕",469777842,"Arial",469777843,"新細明體",469777844,"맑은 고딕",201341986,"1",469769226,"맑은 고딕,Arial,新細明體",268442635,"24",469775450,"eop",201340122,"1",134233614,"true",469778129,"eop",335572020,"1",469778324,"Default Paragraph Font"]}">   Basic Qualifications   <ul data-pm-slice="3 3 []"> <li> 5+ years of direct, hands-on experience in information security with a primary focus on Identity and Access Management (IAM). </li> <li> Deep technical expertise in Okta, including Lifecycle Management (LCM), Universal Directory, Workflows, Adaptive MFA, and SSO integrations. </li> <li> Proven hands-on administration of Saviynt Enterprise IGA, including analytics, connector deployment, lifecycle workflows, and access request configuration. </li> <li> Experience with modern continuous authorization architectures, specifically hands-on exposure to SGNL or similar fine-grained, policy-based access control platforms (CA/ABAC/ReBAC). </li> <li> Strong understanding of core identity standards and protocols: OAuth 2.0, OIDC, SAML 2.0, SCIM, and LDAP. </li> <li> Proficient in scripting and automation using Python, PowerShell, or Bash, alongside strong REST API integration capabilities. </li> <li> Solid grasp of Zero Trust Security frameworks and Least Privilege Access models. </li> </ul>     Preferred Qualifications    <ul data-pm-slice="3 3 []"> <li> Experience with Privileged Access Management (PAM) integrations (e.g., CyberArk, BeyondTrust). </li> <li> Relevant industry certifications such as Okta Certified Professional/Administrator/Consultant, Saviynt Certified Professional, CISSP, or CISM. </li> <li> Background in cloud identity security (AWS IAM, Azure AD / Microsoft Entra ID, GCP IAM). </li> </ul>    Type of work model  <ul> <li data-leveltext="" data-font="Symbol" data-listid="38" data-list-defn-props="{"335552541":1,"335559685":880,"335559991":440,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Hybrid </li> </ul> Our Hybrid work model: Coupang hybrid work model is designed to enable a culture of collaboration that acts a catalyst to enrich the experience of employees. Employees are required to work at least 3 days in the office per week, with the flexibility to work from home 2 days a week, depending on the role requirement. Some businesses may require more time in office due to nature of work.   Details to consider  <ul> <li data-leveltext="" data-font="Symbol" data-listid="38" data-list-defn-props="{"335552541":1,"335559685":880,"335559991":440,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="2" data-aria-level="1">Those eligible for employment protection (recipients of veteran’s benefits, the disabled, etc.) may receive preferential treatment for employment in accordance with applicable laws.   </li> </ul> Privacy Notice   <ul> <li data-leveltext="" data-font="Symbol" data-listid="35" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="1" data-aria-level="1">Your personal information will be collected and managed by Coupang as stated in the Application Privacy Notice located below. <a href="https://privacy.coupang.com/en/land/jobs/">https://privacy.coupang.com/en/land/jobs/</a> </li> </ul>