Staff Software Engineer

Responsibilities

• Design and build secure, scalable identity services for authentication, authorization, identity lifecycle, and related platform capabilities.
• Lead complex technical initiatives from design through production while balancing long-term architecture with practical delivery.
• Serve as technical lead for core CIAM platform areas by guiding architecture, reviewing designs, and advising teams on technical decisions.
• Partner with engineering, product, and security teams to plan implementations, prioritize technical investments, and identify risks.
• Improve the reliability, security, and maintainability of identity-related services through architectural and operational rigor.
• Mentor CIAM engineers through design reviews, technical guidance, and collaborative problem solving.
• Participate in an on-call support rotation as needed.

Requirements

• Significant experience designing and operating authentication and authorization systems in production environments.
• Fastly staff engineers typically have 7+ years of relevant experience.
• Deep understanding of OIDC, OAuth, SAML, SCIM, JWT, and SSO identity standards and technologies.
• Experience with service-to-service authentication and secure communication patterns in distributed systems.
• Strong background in software architecture and system design, including scalability, performance, reliability, and security.
• Demonstrated ability to provide technical leadership across multiple teams through architecture, complex initiative delivery, and collaborative influence.
• Strong written and verbal communication skills, including technical documentation and stakeholder alignment.
• Preferred experience with Go, Java, or Ruby.
• Preferred experience with Keycloak.
• Preferred experience implementing role-based and attribute-based access control systems.
• Experience designing secure identity systems with consideration for authentication threats, authorization models, and operational resilience is preferred.

Benefits

• Medical, dental, and vision insurance beginning on the first day of employment.
• Family planning support, mental health support, and an Employee Assistance Program.
• Life, disability, and accident insurance.
• Flexible vacation policy and up to 18 days of accrued paid sick leave.
• 401(k) with company match and an Employee Stock Purchase Program.
• For 2026, 11 paid local holidays and 12 paid company wellness days.
• Largely hybrid work model with flexibility to split time between the office and home; highly qualified remote candidates within the US may be considered.
• Preferred locations are San Francisco, Denver, and New York, with quarterly travel potentially required.
• Core business-hour availability and occasional nights and weekends are required for on-call coverage.