The mission for our platform team is to create the systems upon which the rest of Invitae is built. It provides self-service tooling, automation, and application deployment technology to support Invitae’s efforts to expand genetic services.

The genetic testing space is moving and expanding quickly. In support of the Invitae mission, our engineering team needs to continue to move faster but with a greater focus on safety. We take the security and privacy of our users’ healthcare information very seriously as our brand promise begins with a strong level of trust. 

We are building security fundamentals directly into the DNA of the platform by managing commonly needed functionality like authentication and authorization, and making secure development and operational methodologies the default.

We are looking for a technical lead who wants to help build this platform and ensure security and privacy across all of our customer experiences.

What you’ll be doing:

• Build security into a software platform via automated policy enforcement.
• Build and extend systems and services that will securely transmit and store sensitive data
• Create shared patterns for secure services and drive adoption of these patterns
• Participate in code reviews and identify security issues
• Support and mentor engineers in secure development practices and be a security subject matter expert within the broader team
• Support compliance and certification programs by defining and implementing platform security standards
• Work with a product team to plan and implement security features
• Collaborate with colleagues on authentication, authorization, and encryption solutions
• Collaborate with product and engineering to balance security risk with product advancement
• Collaborate with engineers to design and implement product features with security in mind
• Support security features in our production environment

What you bring:

• Typically requires a minimum of 12 years of related experience with a Bachelor’s degree; or 6 years and a Master’s degree; or a PhD with 3 years experience. Any equivalent combination of training, education, and experience that provides the required skills, knowledge and abilities.
• Significant experience and passion for building security-focused platforms and customer-facing applications that perform at scale
• Software engineering fundamentals with front-end and back-end applications
• Experience working with multiple programming languages and switching between frameworks as necessary - Go, TypeScript, and Python
• Experience in platform engineering - AWS, Kubernetes, and Terraform
• Experience successfully triaging and resolving security bugs and incidents
• Demonstrated strong communication and interpersonal skills across engineering organizations
• Experience building identity, authentication, authorization and secrets management systems
• Preferred: Evangelized secure coding practices across organizational boundaries
• Preferred: Experience threat modeling new and existing applications
• Preferred: Knowledgeable in secure development practices and common vulnerabilities
• Preferred: Passionate about creating great developer experiences for security features and services

#LI-Remote