Engineering Manager - Identity & Access (Open To Remote Across ANZ) at Canva

About the group/team The Security Group is responsible for protecting Canva systems and data from information security threats. The group runs programs across Application Security, Risk Management, Enterprise Security, and Threat Detection and Response domains. Our teams work together, and with other groups, to deliver preventive and detective controls and processes that reduce security risk.  Identity and Access team (I&A) builds and runs services across Canva to ensure minimal access to our most sensitive services which store customer data. We develop and drive adoption of high security consequence features for all staff at Canva to leverage. The Identity and Access team takes charge for solving security-specific problems, using security domain expertise to unblock engineering to work on Canva-differentiating features. Our mission is to drive unified authentication and authorization across internal systems and data, focused on building flexible user-centric platforms to eliminate risk for Canva and our customers.  Role Responsibilities: • Managing a team of software engineers who design and implement authentication and authorization systems for use within Canva. Primarily focused on protecting customer PII and UGC.  • Owning the strategy for identity and access at Canva, balancing security, compliance and developer experience to build an experience that allows Canvanauts to move quickly, while having secure guardrails in place.  • Coach and develop engineers by providing regular, practical feedback to help them reach their personal growth goals • Own the team’s development methodology including sprint planning, stand-ups and retrospectives resulting in a high-performing team • Working collaboratively with other partner groups such as Infra and IT to build systems that scale beyond our team.  • Driving adoption of our systems internally, championing the benefits of what we build.  Required Experience • A solid understanding of authentication and authorization technologies such as access proxies, SAML, OIDC, OAuth etc.  • The ability to build a strategy around access that balances usability, security and compliance requirements.  • Ability to partner with the team to design and build platform features, owning the whole solution end-to-end. • You’re experienced with languages such as Golang, Python, Java, or similar. • An understanding of attribute based access control systems that utilize Zanzibar style authorization such as AuthZed, Oso and Auth0   Nice to Haves • An understanding of policy-as-code methodologies such as OPA and rego policies.  • Experience with infrastructure tools  like Terraform, Helm, K8s, or similar. • Experience working with CI/CD systems and defining integration pipelines. • A solid understanding of audit and compliance frameworks such as ISO270001, SOC 2, SOX, FedRAMP etc.  • An understanding of emerging AI access patterns and how AI access differs to human access.  • An understanding of corporate identity and IGA systems such as Okta, Lumos, ConductorOne etc.