Senior Security Engineer

At 10x Genomics, accelerating our understanding of biology is more than a mission for us. It's a commitment. This is the century of biology, and the breakthroughs we make now have the potential to change the world. We enable scientists to advance their research, allowing them to address scientific questions they didn't even know they could ask.

Our tools have enabled fundamental discoveries across multiple application areas, including cancer, immunology, and neuroscience. Our teams are empowered and encouraged to follow their passions, pursue new ideas, and perform at their best in an inclusive and dynamic environment. We know that behind every scientific breakthrough, there is a deep infrastructure of talented individuals driving the life sciences industry and making it possible for scientists, engineers, clinicians, computational biologists, and more to make new strides.

We're dedicated to finding the best person for every aspect of our work because the innovations and discoveries that we enable together will lead to better technologies, better treatments, and a better future. Find out how you can make a 10x difference. This role is hybrid in Pleasanton, CA.

Our team is seeking a skilled and motivated Senior Security Engineer (IAM Identity Engineer) to own and enhance identity and access management systems, with a primary focus on maturing our Okta implementation and hardening our AWS Identity and Access Management configuration. The ideal candidate will have deep knowledge of the Okta platform, a proven history of configuring SCIM, in addition to extensive multi-cloud experience.

We know that security is hard and that's why protecting our customers is our highest priority. If you are a self-starter who is passionate about security and is excited to work in a highly collaborative environment alongside a diverse team of experts every day, join us at 10x Genomics.

• Serve as a primary technical security resource on all IAM issues and projects
• Lead, implement, and expand our zero trust architecture
• Mature our Okta implementation by configuring SSO, SCIM, and other automated-provisioning processes
• Review and update cloud-based IAM policies to make sure access policies are least privileged, properly scoped, and governed by version control (Terraform + Git Hub)
• Architect, configure, and audit role-based access control to ensure appropriate and secure user access
• Collaborate with other teams in performing design reviews and technical security assessments to identify risks, ensure access rights are properly aligned, and help other teams improve the overall security of our products.
• Design and implement security best practices and standards across varied engineering teams and environments.
• Conduct threat modeling, identify & drive risk decisions, and influence technical designs and architectures.
• Advocate for security culture and educate colleagues across all parts of 10x.

• 5 years of experience in information security, with at least 3 years in identity access management or cloud security
• Experience configuring cloud identity and access management services including strong understanding of AWS IAM policies, roles, and trust relationships
• Proficient in Okta Workforce Identity Cloud.
• Experience with Terraform, Git Hub or similar for cloud infrastructure management.
• Experience in web security (SSL/TLS, OAuth, SAML, etc.)
• Experience with cloud and web application security standards (CIS benchmarks, OWASP ASVS, SANS 25, etc.)

• A degree in Computer Science, Computer Engineering, Software Engineering, Cybersecurity, Information Security, or a related technical field.
• In-depth technical and foundational knowledge of software engineering, computer systems, security engineering, authentication, and/or applied cryptography.
• Experience with regulatory requirements, and aligning security standards, frameworks, and corporate policy with overall business and technology strategy.
• Experience securing operating systems, networks, and low-level infrastructure.
• Experience with attacker tactics, techniques, and procedures, and corresponding mitigation…