Software Engineer, Platform Access (L2)

Twilio delivers communications solutions that empower businesses and developers to create personalized customer experiences. The Software Engineer, Platform Access (L2) will design, build, and operate identity, governance, access control, and platform security tools across multi-cloud environments, while contributing to Terraform-based automation and secure developer access.

Responsibilities:

• WEAR THE CUSTOMER'S SHOES: Help design, build, and operate automations and access tools that streamline developer workflows while keeping multi-cloud environments secure. Work with security and technical leadership to turn well-scoped tasks into working code
• BE AN OWNER (CODE QUALITY): Participate in code reviews and follow established patterns, testing standards and policy-as-code frameworks across the platform
• BE AN OWNER (INFRASTRUCTURE & OBSERVABILITY): Support multi-cloud access infrastructure spanning AWS, Azure, and GCP accounts using Infrastructure as Code (Terraform). Help maintain least-privilege IAM policies, identity federation, role provisioning, and automated lifecycle workflows across hundreds of cloud accounts. Help maintain observability coverage, including metrics, alerts, and basic distributed tracing, across core data pipelines
• CHAMPION ENGINEERING HEALTH: Build awareness of secure architectural practices and IAM best practices. Flag access drift, technical debt, security vulnerabilities, and platform issues to your team as you encounter them
• GROW AND COLLABORATE: Actively seek feedback and mentorship from senior engineers, participate in sprint planning, and share what you learn with peers as you grow into a more senior role

Requirements:

• 1–2+ years of professional software engineering or DevOps/Platform engineering experience, with practical exposure to multi-cloud environments, Identity & Access Management (IAM), or platform automation
• Practical experience with, or a strong desire to learn, AI-assisted development tools (e.g., Claude Code, GitHub Copilot) to help write code, automate testing, and support debugging workflows
• Practical experience or familiarity with Terraform, Harness, or similar IaC tools to manage cloud resources and access permissions programmatically
• Experience with cloud environments, including basic exposure to account management, IAM permissions, or core services in at least one major provider—AWS (e.g., IAM, Organizations, SSO/Identity Center), Microsoft Azure (e.g., Microsoft Entra ID/Azure AD, RBAC, Subscriptions), or Google Cloud Platform (GCP) (e.g., Cloud IAM, Workload Identity, Projects)
• Working knowledge of at least one of Shell, Terraform, YAML, or Go (Golang), with a willingness to build proficiency across the rest
• Solid understanding of core security concepts (authentication, authorization, least-privilege principles, secrets management) and an eagerness to build self-service, developer-friendly platform tooling
• General familiarity with multi-account/multi-project cloud architecture is a plus
• Familiarity with centralized identity federation, SAML, OIDC, or Okta integration with cloud service providers
• Hands-on experience with containerized workloads (Docker, Kubernetes) or managing access to Kubernetes clusters (EKS/AKS/GKE RBAC)
• Interest in automated cloud governance tools, account vending machines, or identity lifecycle management at scale
• Coursework or personal projects involving distributed systems, cloud security, or API development
• Enthusiasm for working across multi-cloud environments and expanding hands-on depth across AWS, Azure, and GCP over time