Software Engineer - IAM at Booking.com

, District of Columbia, United States -

Full Time

Start Date

Immediate

Expiry Date

21 Jul, 26

Salary

0.0

Posted On

22 Apr, 26

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Java, Python, AWS, Snowflake, IAM, S3, Distributed systems, RBAC, ABAC, Security, Compliance, Auditability, Data platforms, System integration, Backend development, Observability

Industry

Software Development

Description

About us: At Booking.com, data drives our decisions. Technology is at our core. And innovation is everywhere. But our company is more than datasets, lines of code or A/B tests. We’re the thrill of the first night in a new place. The excitement of the next morning. The friends you encounter. The journeys you take. The sights you see. And the memories you make. Through our products, partners and people, we make it easier for everyone to experience the world About the team: Booking.com (USA), Inc, one of the support companies in the United States, is seeking a full time Software Engineer in Washington, DC for the IAM team within the Data and Machine Learning department. The IAM team builds and operates the identity and access management layer for Booking’s central data platform, enabling secure and compliant access to data. The team owns access provisioning, enforcement, and credential management. We focus on ensuring the right people and services have the right access at the right time, with strong guarantees around auditability, compliance, and reliability, while keeping access workflows efficient and scalable. Role Description: This role focuses on building and operating the identity and access management (IAM) platform for Booking’s data ecosystem across Snowflake and AWS S3. You will design and maintain the systems that control how humans and services access data, ensuring strong guarantees around security, compliance, and auditability, while minimizing friction for users. You will own the full access lifecycle - from identity and role provisioning, to access request flows, to enforcement and audit - integrating across systems. This role sits at the intersection of data platforms, security, and compliance, and is critical to enabling scalable and governed data access across the company. Key Job Responsibilities and Duties: Own the IAM Platform: Design, build, and operate the IAM layer that governs access to BDX data across Snowflake and AWS S3, using Immuta and internal services. End-to-End Access Lifecycle: Implement and maintain the full access lifecycle: identity onboarding, role provisioning, access requests, enforcement, and revocation. Policy Enforcement (Fine-Grained Controls): Enforce ABAC/PBAC policies, masking, row-level filters, and S3 Access Grants to ensure sensitive data is only accessed through approved paths. Compliance, Audit, and SOX Controls: Build and maintain auditability, access logging, and enforceable controls required for SOX and internal governance standards. Reliability, Observability, and Performance: Improve system reliability and reduce access provisioning latency through better observability, retries, and failure handling. Important aspects of the job include: Operate in a highly integrated ecosystem (Snowflake, AWS, identity providers) and own the seams between systems. Take full ownership of access correctness - incorrect access is a security issue, not just a bug. Build for auditability by design, not as an afterthought. Continuously reduce friction in access workflows without weakening governance guarantees. Role Qualifications and Requirements: Engineering Foundation: 3+ years building backend or platform systems in Java, Python, or similar. Distributed Systems & Reliability: Experience designing systems that are observable, fault-tolerant, and operate reliably at scale. Cloud Platform Experience: Hands-on experience with AWS (IAM, S3) and/or Snowflake or similar data platforms. Systems Integration: Experience integrating multiple systems (identity providers, data platforms, SaaS tools) into cohesive workflows. IAM & Security Fundamentals: Understanding of RBAC/ABAC, IAM roles and policies, authentication/authorization flows, and credential lifecycle management. Operational Ownership: Comfortable owning production systems, handling incidents, and improving system performance and reliability over time. Developer Experience Mindset: Ability to design platforms that are secure by default but easy to use and adopt. Benefits & Perks - Global Impact, Personal Relevance: Booking.com’s Total Rewards Philosophy is not only about compensation but also about benefits. We offer a competitive compensation and benefits package, as well unique-to-Booking.com benefits which include: Medical, life, and disability insurance* Annual paid time off and generous paid leave scheme including: parent, grandparent, bereavement, sick, and care leave. Industry leading product discounts for yourself, friends, and family, including automatic Genius Level 3 status. Free access to online learning platforms, mentorship programs, and a complimentary Headspace membership. Collaborative, friendly and diverse culture. Referral Program. This role does not come with relocation assistance. This role does not come with visa assistance. For Washington, DC this role will have a salary range of: $191,600 - $212,900 Additional Annual or Quarterly bonus potential (role dependent). *Please note that while our philosophy is the same in every location, benefits may differ by office/country. Should you require accommodation to meet the essential functions of this job, please let us know. Diversity, Equity and Inclusion (DEI) at Booking.com: Diversity, Equity & Inclusion have been a core part of our company culture since day one. This ongoing journey starts with our very own employees, who represent over 140 nationalities and a wide range of ethnic and social backgrounds, genders and sexual orientations. Take it from our Chief People Officer, Paulo Pisano: “At Booking.com, the diversity of our people doesn’t just build an outstanding workplace, it also creates a better and more inclusive travel experience for everyone. Inclusion is at the heart of everything we do. It’s a place where you can make your mark and have a real impact in travel and tech.” We ensure that colleagues with disabilities are provided the adjustments and tools they need to participate in the job application and interview process, to perform crucial job functions, and to receive other benefits and privileges of employment. Application Process: Let’s go places together: How we Hire. This role does come with relocation assistance. This role does not come with visa assistance. Booking.com is proud to be an equal opportunity workplace and is an affirmative action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. We strive to move well beyond traditional equal opportunity and work to create an environment that allows everyone to thrive. Pre-Employment Screening If your application is successful, your personal data may be used for a pre-employment screening check by a third party as permitted by applicable law. Depending on the vacancy and applicable law, a pre-employment screening may include employment history, education and other information (such as media information) that may be necessary for determining your qualifications and suitability for the position.

Responsibilities

The role involves designing, building, and operating the identity and access management layer for the company's data ecosystem across Snowflake and AWS. You will own the full access lifecycle, including provisioning, policy enforcement, and ensuring compliance with SOX and internal governance standards.