Software Engineer, Platform Access (L2)

📋 Job Overview

At Twilio, we’re shaping the future of communications, all from the comfort of our homes. We deliver innovative solutions to hundreds of thousands of businesses and empower millions of developers worldwide to craft personalized customer experiences. Our dedication to remote-first work, and strong culture of connection and global inclusion means that no matter your location, you’re part of a vibrant team with diverse experiences making a global impact each day. As we continue to revolutionize how the world interacts, we’re acquiring new skills and experiences that make work feel truly rewarding. Your career at Twilio is in your hands.

🏢 About Twilio

We use Artificial Intelligence (AI) to help make our hiring process efficient. That said, every hiring decision is made by real Twilions! Also, while we are a remote-first company, you may be asked to report in person on an ad-hoc basis for team gatherings, functional off-sites or customer meetings.

🎯 The Role

This position is an engineering role within Twilio’s Cloud Native Foundations Team, suited to an engineer focused on identity, governance, and automated access control across multi-cloud environments. Our team manages identity federation, least-privilege access, and automated provisioning for hundreds of accounts across Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP). As an L2 engineer, you will help design, build, and operate access controls and platform security tools at scale. You'll get hands-on with multi-cloud IAM, contribute to Terraform-based infrastructure automation, and write code to ensure secure, seamless developer access—using modern AI-assisted tooling to move faster and ramp up your skills.

✅ Key Responsibilities

• Help design, build, and operate automations and access tools that streamline developer workflows while keeping multi-cloud environments secure. Work with security and technical leadership to turn well-scoped tasks into working code.
• Participate in code reviews and follow established patterns, testing standards and policy-as-code frameworks across the platform.
• Support multi-cloud access infrastructure spanning AWS, Azure, and GCP accounts using Infrastructure as Code (Terraform). Help maintain least-privilege IAM policies, identity federation, role provisioning, and automated lifecycle workflows across hundreds of cloud accounts. Help maintain observability coverage, including metrics, alerts, and basic distributed tracing, across core data pipelines.
• Build awareness of secure architectural practices and IAM best practices. Flag access drift, technical debt, security vulnerabilities, and platform issues to your team as you encounter them.
• Actively seek feedback and mentorship from senior engineers, participate in sprint planning, and share what you learn with peers as you grow into a more senior role.

📌 Required Qualifications

• 1–2+ years of professional software engineering or DevOps/Platform engineering experience, with practical exposure to multi-cloud environments, Identity & Access Management (IAM), or platform automation.
• Practical experience with, or a strong desire to learn, AI-assisted development tools (e.g., Claude Code, GitHub Copilot) to help write code, automate testing, and support debugging workflows.
• Practical experience or familiarity with Terraform, Harness, or similar IaC tools to manage cloud resources and access permissions programmatically.
• Experience with cloud environments, including basic exposure to account management, IAM permissions, or core services in at least one major provider—AWS (e.g., IAM, Organizations, SSO/Identity Center), Microsoft Azure (e.g., Microsoft Entra ID/Azure AD, RBAC, Subscriptions), or Google Cloud Platform (GCP) (e.g., Cloud IAM, Workload Identity, Projects). General familiarity with multi-account/multi-project cloud architecture is a plus.
• Working knowledge of at least one of Shell, Terraform, YAML, or Go (Golang), with a willingness to build proficiency across the rest.
• Solid understanding of core security concepts (authentication, authorization, least-privilege principles, secrets management) and an eagerness to build self-service, developer-friendly platform tooling.

⭐ Desirable Experience

• Familiarity with centralized identity federation, SAML, OIDC, or Okta integration with cloud service providers.
• Hands-on experience with containerized workloads (Docker, Kubernetes) or managing access to Kubernetes clusters (EKS/AKS/GKE RBAC).
• Interest in automated cloud governance tools, account vending machines, or identity lifecycle management at scale.
• Coursework or personal projects involving distributed systems, cloud security, or API development.
• Enthusiasm for working across multi-cloud environments and expanding hands-on depth across AWS, Azure, and GCP over time.

🎁 Benefits

Working at Twilio offers many benefits, including competitive pay, generous time off, ample parental and wellness leave, healthcare, a retirement savings program, and much more. Offerings vary by location. The estimated pay ranges for this role are as follows: Based in Colorado, Hawaii, Illinois, Maryland, Massachusetts, Minnesota, Vermont or Washington D.C. : $116,960.00 - $146,200.00. Based in New York, New Jersey, Washington State, or California (outside of the San Francisco Bay area): 123,760.00-154,700.00. Based in the San Francisco Bay area, California: 137,520.00-171,900.00. This role may be eligible to participate in Twilio’s equity plan and corporate bonus plan. All roles are generally eligible for the following benefits: health care insurance, 401(k) retirement account, paid sick time, paid personal time off, paid parental leave.

🛂 Visa & Eligibility

This role will be remote, but is not eligible to be hired in CA, CT, NJ, NY, PA, WA. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Additionally, Twilio participates in the E-Verify program in certain locations, as required by law.