Staff Software Engineer, AI Agent, Google Cloud IAM Infrastructure

Google's software engineers develop the next-generation technologies that change how billions of users connect, explore, and interact with information and one another. Our products need to handle information at massive scale, and extend well beyond web search. We're looking for engineers who bring fresh ideas from all areas, including information retrieval, distributed computing, large-scale system design, networking and data storage, security, artificial intelligence, natural language processing, UI design and mobile; the list goes on and is growing every day. As a software engineer, you will work on a specific project critical to Google’s needs with opportunities to switch teams and projects as you and our fast-paced business grow and evolve. We need our engineers to be versatile, display leadership qualities and be enthusiastic to take on new problems across the full-stack as we continue to push technology forward.

GCP's Identity and Access Management (IAM) team, Capsium, is building the critical access control foundation to secure enterprise AI adoption because self-supporting AI agents shift the security focus from "Who has access?" to "What can this agent do?", they introduce complex new tests: obscured risk perimeters, the rapid proliferation of high-velocity non-human identities, and dynamic actions that outpace traditional static policies. To address these threats, we are developing the core AUTHZ platform that empowers Google Cloud Platform (GCP) customers to confidently connect Large Language Models (LLMs) and deploy complex, multi-agent ecosystems without compromising their security posture.

Google Cloud accelerates every organization’s ability to digitally transform its business and industry. We deliver enterprise-grade solutions that leverage Google’s cutting-edge technology, and tools that help developers build more sustainably. Customers in more than 200 countries and territories turn to Google Cloud as their trusted partner to enable growth and solve their most critical business problems.

Individual pay is determined by factors including job-related skills, experience, and relevant education or training.

US: $207000 - $301000 (USD) + 20% bonus target + equity + benefits

Learn more about benefits at Google.

Responsibilities

• Architect and implement agentic authorization solutions, directly contributing to GCP's Agent Cloud foundation strategy.
  
• Lead the evolution of Cloud Identity and Access Management (IAM) through AI/ML integration. Drive the technical vision and design for the feature development of a highly available, low-latency, and scalable infrastructure systems for IAM policies and resources.
  
• Collaborate with product managers, technical program managers, and other engineering teams across our organization to define the roadmap and deliver on our commitments.
  
• Mentor and grow a team of talented engineers, fostering a culture of technical excellence and innovation.
  
• Ensure the operational health of our systems by participating in on-call rotations and driving improvements to our monitoring and automation.
  

Minimum qualifications:

• Bachelor's degree in Computer Science or a related technical field or equivalent practical experience.
• 8 years of experience in software development.
  
• 5 years of experience in a technical leadership role, designing and building large-scale distributed systems.
  
• 5 years of experience with cloud computing technologies.
• 3 years of experience in applying artificial intelligence and machine learning techniques to real-world problems, in infrastructure or security domains.

Preferred qualifications:

• Master’s degree or PhD in Engineering, Computer Science, or a related technical field.
  
• 8 years of experience with data structures and algorithms.
• 3 years of experience in a technical leadership role leading project teams and setting technical direction.
  
• 3 years of experience working in a matrixed organization involving cross-functional, or cross-business projects.
• Experience programming in C++.
• Experience working in cloud security.

Note: By applying to this position you will have an opportunity to share your preferred working location from the following: Kirkland, WA, USA; Seattle, WA, USA.

In accordance with Washington state law, we are highlighting our comprehensive benefits package, which is available to all eligible US based employees. Benefits for this role include:

• Health, dental, vision, life, disability insurance
• Retirement Benefits: 401(k) with company match
• Paid Time Off: 20 days of vacation per year, accruing at a rate of 6.15 hours per pay period for the first five years of employment
• Sick Time: 40 hours/year (increased to 69 hours/year for Seattle) including 5 discretionary sick days per instance
• Maternity Leave (Short-Term Disability + Baby Bonding): 28-30 weeks
• Baby Bonding Leave: 18 weeks
• Holidays: 13 paid days per year