Senior Software Engineer

Posted 2mo ago

The employer’s full description could not be read from their board. This is a summary of the posting — follow the apply link for the original.

Design and build platform services for authentication, authorization, and audit
Develop a unified RBAC/ReBAC service
Implement token issuance and session handling
Create SDKs for product teams
Model permissions and access control primitives
Ship libraries and APIs for other engineers
Implement protocol-level support for SAML, SCIM, OIDC, OAuth2, and MFA/passwordless flows
Own enterprise SSO and provisioning integrations
Build audit and authorization-decision telemetry pipeline
Partner with product engineering teams for auth migration
Carry the platform on-call rotation
Own production reliability for critical systems

Minimum 4+ years building production backend systems at scale
Comfort with Go, Rust, or C++
Comfort with TypeScript or Python
Hands-on experience designing and implementing an authentication or authorization service
Experience building a token issuer, OIDC or OAuth2 provider, policy engine, permissions model, or FGA/ReBAC system
Working knowledge of SAML, SCIM, OIDC, and OAuth2 at the protocol level
Experience designing adoptable APIs and SDKs
Experience operating distributed systems at scale
Familiarity with identity vendors (Auth0, WorkOS, AWS IAM, GCP IAM, Azure IAM)

Built or contributed to a Zanzibar-style authorization system
Run an OpenFGA or SpiceDB deployment beyond the demo
Designed a multi-tenant permission model with custom roles, hierarchies, delegation, and ABAC attributes
Shipped an internal SDK that product teams adopted

Skills