Software Engineer, Technology Risk
Software Engineering, IT
New York, NY, USA
USD 165k-300k / year
The Technology Risk team is responsible for Two Sigma's most critical authentication, authorization, and security infrastructure systems. We build, maintain, and evolve world-class security solutions including identity management systems, access control platforms, and configuration management databases that protect the company's technology while meeting evolving business needs.
This role is focused on infrastructure development and distributed systems engineering in service of Two Sigma's security products. The most critical datastore we maintain is the configuration management database, a proprietary graph database (CMDB), which serves as Two Sigma's centralized system of record — from infrastructure to applications to people. You will own the technical direction and implementation of CMDB: its data model, query surfaces, client libraries, user interface, and reliability of the service. If you're passionate about building something foundational, we'd love for you to apply today!
- Own the architecture and long-term evolution of CMDB's graph data model
- Drive performance and reliability work across CMDB's query interfaces — Web UI, REST, SPARQL for recursive graph traversal, and the Python/Java client
- Own the entire lifecycle of development, including design, testing, continuous deployment, productionization, and observability
- Mentor a small team of engineers
- Partner with data owners across the company to keep entity data accurate
- Develop solutions for scalable agentic permissions management
- 7+ years of software engineering experience, including hands-on ownership of a data-modeling-heavy or graph-backed service in production
- Proficiency in SQL and large-scale data management
- Experience designing and operating large-scale REST APIs
- Track record of leading technical design for foundational infrastructure systems
- Experience with containerization technologies (Docker) and orchestration platforms (Kubernetes)
- Background in identity/access management systems (groups, transitive membership, authorization/entitlements)
- Experience exposing internal systems safely to LLM/agent tooling (e.g., MCP servers)
- Core Benefits: Fully paid medical and dental insurance premiums for employees and dependents, competitive 401k match, employer-paid life & disability insurance
- Perks: Onsite gyms with laundry service, wellness activities, casual dress, snacks, game rooms
- Learning: Tuition reimbursement, conference and training sponsorship
- Time Off: Generous vacation and unlimited sick days, competitive paid caregiver leaves
- Hybrid Work Policy: Flexible in-office days with budget for home office setup