Security Engineer, Product & Production Infrastructure

Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone’s reach while doing the most important work of your career.

About the team

IAM is the nerve center of Stripe. We control how millions of businesses grant access to their account, including employees, AI agents, apps, and API integrations, across the Dashboard, API, CLI, and MCP. We're also a platform team, building the unified, fine-grained permissions model that every product at Stripe builds on.

AI agents are changing how businesses operate, and how they get authorized, governed, and secured is being defined right now—largely by us. We’re tackling challenging and unsolved problems for real businesses, like how to model agents when they blur the line between acting on behalf of a human vs. standalone principals, or how to authorize entire agent workflows rather than step-by-step actions. We’re collaborating directly with the frontier AI labs on the evolution of MCP, new identity protocols, and agent integrations. We build for solo founders and Fortune 500s alike, and the tension between those two is where the real product work lives.

What you’ll do

You'll set the vision and drive the roadmap for how every principal, human, agent, or app, gets access to a Stripe account. You'll do it by talking directly to the founders, admins, and developers who use it.

Design the experience of granting access, everywhere. Signing up, inviting a teammate, creating an API key, authorizing an agent or a third-party app.
Design for agents specifically. Design for agents as a new principal within Stripe, including how they authenticate, what they're allowed to do, and how businesses stay in control, including approvals and human-in-the-loop checkpoints for actions involving real money. You're defining an experience that will set the industry standard.
Drive least privilege, made easy. Take holistic ownership across Stripe to ensure that every user, app and agent has only the permissions it requires. Build custom roles, smart permission defaults, and permission recommendations based on real API usage to make least-privilege authorization easy rather than tedious.
Push toward a world without secrets. Make secretless authentication (Workload Identity Federation) the default way developers integrate with Stripe to prevent emerging security threats from increasingly sophisticated and AI-powered attackers.
Partner across all of Stripe. Pitch an ambitious vision, then get teams across Dashboard, API Platform, Security, Payments and Money Movement genuinely excited to build it with you.

Who you are

The hardest part of this job, and the most fun, is the constant trade-off: usability vs. security, flexibility vs. simplicity. It takes taste to find a shape that feels effortless for a solo founder and holds up at Fortune 500 scale.

Minimum requirements

5+ years in PM, shipping platform or infrastructure products that other teams build on
Background in security, identity, auth, or developer platforms, or serious curiosity about the space
A habit of talking to users to find the real problem, not the reported one
Technical fluency to go deep with engineers on authorization and authentication design
A bias toward experimentation over big-bang launches
Comfort setting direction in a space that's still being invented, across teams you don't manage