Staff Software Engineer, Identity and Authorization
Core
Architecting and evolving a centralized, relationship-based authorization framework (IDSM) for enterprise and public-sector customers to manage fine-grained access and identity.
Role type
Staff Software Engineer, Identity and Authorization
Builds
A unified, production-grade authorization platform built on SpiceDB with cloud-native identity integrations.
Domain
Enterprise Identity and Access Management (IAM), Cloud Security
Required skills
Relationship-based/fine-grained authorization design, OIDC/SAML protocols, Cloud workload identity (AWS IRSA, Azure, GCP), Secrets management (Vault), Backend engineering (Go/Java), System architecture, AI-assisted development
Preferred skills
Migrating legacy auth systems, Building auth products, Platform team experience
Technologies
SpiceDB, AWS IRSA, Azure Workload Identity, GCP Workload Identity Federation, Vault, Kubernetes, Go, Java, OIDC, SAML
Responsibilities
Set architectural direction for identity solutions, Articulate complex architecture decisions, Act as technical authority for auth questions, Lead design reviews and unblock engineers, Improve architecture to reduce tech debt, Establish patterns for AI-assisted development
Seniority
Staff, hands-on IC with strategic influence
