Senior Software Engineer, Identity

Responsibilities

• Design and implement identity infrastructure for secure authentication and authorization across enterprise systems.
• Build authentication capabilities including Single Sign-On, Multi-Factor Authentication, and federated identity solutions.
• Build authorization capabilities using relation-based, attribute-based, and role-based access control.
• Develop identity governance policies supporting security policies, industry regulations, and organizational standards.
• Present technical information and advise teams and stakeholders on identity management and best practices.

Requirements

• 5+ years of full-time engineering experience post-graduation, specializing in infrastructure and identity systems.
• Expertise with IAM controls, Infrastructure as Code using Terraform or Pulumi, and microservice deployment practices.
• Hands-on experience with OpenFGA, Authzed, Cedar, Topaz, or similar authorization frameworks at scale.
• Strong understanding of Zanzibar-based ReBAC models, relationship tuples, and access-control evaluation.
• Knowledge of OAuth 2.0, OIDC, SAML, JWT, and identity-provider solutions such as Entra ID and Okta.
• Extensive software-development experience and deep understanding of distributed systems and public cloud platforms, preferably AWS.
• Demonstrated independent ownership of successful engineering projects.
• Strong communication and collaboration skills, including the ability to explain complex technical concepts to non-technical stakeholders.
• Preferred experience securing API access and implementing application-level access controls.
• Preferred multi-cloud infrastructure experience with AWS, Azure, GCP, or other platforms.
• Preferred experience integrating IAM solutions with Java, Python, Node.js, or .NET applications.
• Preferred mentorship or leadership experience supporting junior engineers.

Benefits

• Base salary, equity, and benefits are available for eligible roles.
• Comprehensive health, dental, and vision coverage.
• Retirement benefits, learning and development stipend, and generous paid time off.
• The role may be eligible for a commuter stipend.
• This is a full-time position with a listed base salary range for San Francisco, New York, and Seattle.