Staff Software Engineer – Identity and Authorization

Posted 3 hours ago

Apply Now

Resume Score

Check how well your resume matches this job before you apply.

Sign in to check score

About the role

  • Staff Software Engineer shaping Domino’s centralized identity and authorization platform. Designing scalable SpiceDB-based access controls, cloud identity integrations, and enterprise-grade security foundations.

Responsibilities

  • Design and evolve centralized, fine-grained, relationship-based authorization primitives across the platform
  • Harden the authorization layer for enterprise and public-sector scale, reliability, and security
  • Plan and execute migration from legacy access checks without disrupting customers
  • Rethink group and organizational hierarchy modeling for large enterprises
  • Deepen cloud workload identity integration, starting with AWS IRSA and extending to Azure and GCP equivalents
  • Design core identity and access capabilities with clean interfaces and flexible abstractions for company-wide adoption
  • Establish patterns for AI-assisted development while maintaining security and code quality
  • Set architectural direction for secure, scalable identity and access solutions
  • Communicate complex architectural decisions clearly across Engineering
  • Serve as the technical authority for engineers and teams building on IDSM
  • Lead design reviews, unblock engineers, and champion flexible abstractions and well-designed interfaces
  • Improve architecture, remove technical debt, and reduce ongoing maintenance
  • Help the team balance quality with speed of iteration
  • Improve identity and user-management experiences for enterprise customers

Requirements

  • Track record of evolving an enterprise-grade authorization system under real production traffic
  • Experience designing a new authorization system and migrating from a legacy approach (a plus)
  • Experience on a platform team supporting other services within a larger engineering organization
  • Background at a company that builds authentication or authorization products (a plus)
  • Concrete example of an authorization system that solved recurring customer challenges
  • History of improving team designs, velocity, and quality
  • Hands-on relationship-based or fine-grained authorization experience, including schema design with relations, permissions, and caveats, and understanding tradeoffs versus traditional RBAC
  • Solid grounding in OIDC and SAML; experience with Keycloak, Auth0, Okta, or ForgeRock is preferred
  • Practical workload identity experience with AWS IRSA, Azure Workload Identity, or GCP Workload Identity Federation
  • Familiarity with credential management systems such as Vault
  • Strong Go, Java, or comparable language skills
  • Experience running services on Kubernetes
  • API design experience from owning a platform used by other teams
  • Experience architecting authentication and authorization frameworks that scale to enterprise customers
  • Real-world experience using AI coding tools while maintaining code quality and security rigor

Benefits

  • Growth mindset and continuous improvement culture
  • Environment of teaching and learning with tools to support employee success
  • Diverse and inclusive workplace encouraging people of all backgrounds, genders, ethnicities, abilities, and sexual orientations to apply

Job type

Full Time

Experience level

Lead

Salary

Not specified

Degree requirement

No Education Requirement

Tech skills

AWSAzureCloudGoogle Cloud PlatformJavaKubernetesVaultGo

Location requirements

RemoteCanada

Report this job

Found something wrong with the page? Please let us know by submitting a report below.