Design and evolve centralized, fine-grained, relationship-based authorization primitives across the platform
Harden the authorization layer for enterprise and public-sector scale, reliability, and security
Plan and execute migration from legacy access checks without disrupting customers
Rethink group and organizational hierarchy modeling for large enterprises
Deepen cloud workload identity integration, starting with AWS IRSA and extending to Azure and GCP equivalents
Design core identity and access capabilities with clean interfaces and flexible abstractions for company-wide adoption
Establish patterns for AI-assisted development while maintaining security and code quality
Set architectural direction for secure, scalable identity and access solutions
Communicate complex architectural decisions clearly across Engineering
Serve as the technical authority for engineers and teams building on IDSM
Lead design reviews, unblock engineers, and champion flexible abstractions and well-designed interfaces
Improve architecture, remove technical debt, and reduce ongoing maintenance
Help the team balance quality with speed of iteration
Improve identity and user-management experiences for enterprise customers
Requirements
Track record of evolving an enterprise-grade authorization system under real production traffic
Experience designing a new authorization system and migrating from a legacy approach (a plus)
Experience on a platform team supporting other services within a larger engineering organization
Background at a company that builds authentication or authorization products (a plus)
Concrete example of an authorization system that solved recurring customer challenges
History of improving team designs, velocity, and quality
Hands-on relationship-based or fine-grained authorization experience, including schema design with relations, permissions, and caveats, and understanding tradeoffs versus traditional RBAC
Solid grounding in OIDC and SAML; experience with Keycloak, Auth0, Okta, or ForgeRock is preferred
Practical workload identity experience with AWS IRSA, Azure Workload Identity, or GCP Workload Identity Federation
Familiarity with credential management systems such as Vault
Strong Go, Java, or comparable language skills
Experience running services on Kubernetes
API design experience from owning a platform used by other teams
Experience architecting authentication and authorization frameworks that scale to enterprise customers
Real-world experience using AI coding tools while maintaining code quality and security rigor
Benefits
Growth mindset and continuous improvement culture
Environment of teaching and learning with tools to support employee success
Diverse and inclusive workplace encouraging people of all backgrounds, genders, ethnicities, abilities, and sexual orientations to apply
Staff Software Engineer building realtime blockchain market - data systems for Dune, an onchain data and intelligence provider. Designing distributed ingestion, streaming, APIs, and reliable data infrastructure.
Principal Engineer defining GitLab’s next - generation Fulfillment architecture for its DevSecOps platform. Modernizing entitlements, licensing, provisioning, usage, and cost - management systems.
Senior embedded software developer developing low - voltage power distribution controls and diagnostics. Supporting General Motors’ next - generation vehicle power management and software - defined vehicle systems.
Senior Full Stack Java Engineer building Java, React, and microservices solutions for workforce management. Supporting forecasting, scheduling, adherence, and operational reporting in contact centers.
Senior software engineer leading Salesforce and FinancialForce application development for CDW, a Fortune 500 technology solutions provider. Designing, testing, and delivering large - scale business software projects.
Senior Full Stack Developer modernizing school transportation platforms with C#, C++, React, and Claude Code. Building reliable core systems and cloud - native AI - enabled applications.
Senior Full Stack Engineer building AI - powered banking software for landlords and real estate investors. Owning React and Node.js features end - to - end in Baselane’s AI - first engineering environment.
Process Quality Engineering Team Lead overseeing quality investigations and non - conformance disposition for Kardium’s atrial - fibrillation medical device manufacturing operations. Leading engineers across a two - shift production environment.