Staff Engineer, Agentic Access Controls

Google's software engineers develop the next-generation technologies that change how billions of users connect, explore, and interact with information and one another. Our products need to handle information at massive scale, and extend well beyond web search. We're looking for engineers who bring fresh ideas from all areas, including information retrieval, distributed computing, large-scale system design, networking and data storage, security, artificial intelligence, natural language processing, UI design and mobile; the list goes on and is growing every day. As a software engineer, you will work on a specific project critical to Google’s needs with opportunities to switch teams and projects as you and our fast-paced business grow and evolve. We need our engineers to be versatile, display leadership qualities and be enthusiastic to take on new problems across the full-stack as we continue to push technology forward.

The Access Governance Platform (AGP) team secures Google Cloud (GCP and Workspace) by governing administrative access to production environments and customer content. We own flagship, customer-facing security products including Access Transparency (AXT) and Access Approval (AXA) alongside critical internal compliance controls.

Our systems protect mission-critical, tier-1 enterprise deployments for some of the world's most trusted organizations, including Apple, Deutsche Bank, Anthropic, and Workday. By delivering these high-assurance security controls, our platform underpins massive market opportunities across EU Sovereign Cloud and US Public Sector compliance frameworks (such as IL5 and ITAR), making safe and compliant AI adoption possible at hyperscale.

Google Cloud accelerates every organization’s ability to digitally transform its business and industry. We deliver enterprise-grade solutions that leverage Google’s cutting-edge technology, and tools that help developers build more sustainably. Customers in more than 200 countries and territories turn to Google Cloud as their trusted partner to enable growth and solve their most critical business problems.

Individual pay is determined by factors including job-related skills, experience, and relevant education or training.

US: $207000 - $300000 (USD) + 20% bonus target + equity + benefits

Learn more about benefits at Google.

Responsibilities

• Pioneer the future of AI safety by designing next-generation architectures and security frameworks for autonomous agents, adapting proven enterprise-grade access controls to solve complex compliance challenges at scale.
• Translate high-level strategy into concrete technical roadmaps and project plans. Lead and mentor a high-performing team of software engineers to rapidly build, test, and deploy robust production services and controls.
• Collaborate closely with Product Management, Security Architects, and partner Google Cloud engineering teams to build cohesive, user-centric, and industry-leading access solutions.
• Partner with senior technical leaders to align on platform roadmap strategy, secure organizational buy-in, and successfully navigate all stages of the product development lifecycle from concept to global launch.

Minimum qualifications:

• Bachelor's degree or equivalent practical experience.
  
• 8 years of experience in software development.
  
• 5 years of experience building software for data privacy or security (e.g., identity and access management).
  
• 3 years of experience with software design and architecture.

Preferred qualifications:

• Master’s degree or PhD in Engineering, Computer Science, or a related technical field.
  
• 8 years of experience with data structures and algorithms.
• Experience designing or implementing access control and security guardrails for AI agents, including tool-use policies, runtime sandboxing, or autonomous workflow governance.
• Experience building or governing systems focused on agentic access, safety, and compliance.