Staff Software Engineer
Core
Define and own the technical architecture for authentication systems (OAuth, OIDC, SAML, LDAP, SCIM) and lead large-scale initiatives in the critical path of user interaction for millions of users.
Role type
Staff Software Engineer (Identity and Access)
Builds
Authentication layer and identity protocols for Grafana Cloud and open-source products
Domain
SaaS / Observability / Identity & Access Management
Required skills
Distributed systems engineering, Go (Golang), Technical leadership, Mentoring senior engineers, Identity protocols (OAuth 2.x/2.1, OIDC, SAML, LDAP, SCIM), Low-latency high-throughput services, SLO/SLI/Error budget design, Security threat models
Preferred skills
Kubernetes, TypeScript/React, OpenFGA, KiFederate IDP, Security critical environments, Open Source contributions, Observability tooling (Grafana, Prometheus, OpenTelemetry)
Technologies
Go, OAuth 2.1, OIDC, SAML, LDAP, SCIM, Kubernetes, TypeScript, React, OpenFGA, KiFederate, Prometheus, OpenTelemetry
Responsibilities
Define and own technical architecture for authentication systems, Lead design and implementation of large-scale multi-quarter initiatives, Mentor and develop senior engineers, Serve as technical authority for identity protocols, Drive cross-team technical alignment on authentication standards, Represent Grafana Labs at meetups and conferences
Seniority
Staff, hands-on IC with significant leadership scope
