Senior Staff Engineer – Agentic Identity

This is a fully remote position, open to applicants in Alabama, +45 more states.

📋 Description

• Develop and execute scalable frameworks for identity and access management tailored for AI agents.

• Create token exchange mechanisms, credential brokering, workload identity, and delegated access models.

• Construct reusable APIs, SDKs, CLI tools, and integration patterns, particularly those based on MCP access.

• Collaborate with Security, AI Platform, Product, and Cloud Operations teams.

• Articulate technical strategy from initial concept to production deployment.

• Establish architectural direction, perform design and code reviews, and set engineering standards for non-human identity.

• Guide and mentor engineering talent.

• Rapidly prototype solutions for unclear identity and security challenges.

• Validate solutions with both internal and external partners, refining them into scalable production services.

• Develop core agentic identity capabilities that span cloud, on-premises, and hybrid architectures.

⛳️ Requirements

• Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, or a related technical discipline with 12+ years of software engineering experience, or a Master’s degree with 8+ years of relevant experience.

• Over 10 years of experience in designing and constructing distributed systems, backend services, or security platforms in production settings.

• At least 5 years of experience implementing enterprise identity, authentication, or access protocols such as OAuth 2.0/2.1, OIDC, SAML, SCIM, LDAP, SPIFFE, or mTLS.

• Minimum of 4 years of hands-on experience with containerization technologies like Docker, containerd, or Kubernetes.

• 4+ years of experience with at least one major cloud service provider: AWS, Azure, or GCP.

• More than 3 years of experience in security engineering principles, including threat modeling, attack-path analysis, or security architecture reviews.

• Experience in designing or securing AI-adjacent architectures, tool-using agentic workflows, policy control layers, or MCP authorization.

• Extensive technical expertise in developing multi-threaded, high-throughput server-side applications using Go, C/C++, or Java on Linux.

• Understanding of AI-specific security risks, such as prompt injection, tool misuse, privilege escalation, and unsafe delegation patterns.

• Experience participating in industry standards organizations or presenting at technical industry conferences.

• Proficient knowledge in device trust integrations, endpoint posture assessment, and hardware-backed identity signals for policy enforcement.

🏝️ Benefits

• Medical, dental, and vision insurance.

• 401(k) plan with a Cisco matching contribution.

• Paid parental leave.

• Short- and long-term disability coverage.

• Basic life insurance.

• Cisco restricted stock unit grants may be offered, contingent upon eligibility and continued employment.

• 10 paid holidays per full calendar year.

• 1 floating holiday for non-exempt employees.

• Paid day off for employee birthdays.

• Paid year-end holiday shutdown.

• 4 paid personal wellness days.

• 16 days of paid vacation per full calendar year for non-exempt employees.

• Flexible vacation time off program with no defined limit for eligible exempt employees.

• 80 hours of sick time off granted on hire date and each January 1st thereafter.

• Up to 80 hours of unused sick time carried over annually.

• Additional paid time off for critical or emergency family matters.

• Optional 10 paid volunteer days per full calendar year.

• Annual bonuses may be available for non-sales positions.

• Performance-based incentive pay for employees on sales plans.

• Opportunities for growth and development on a global scale.

• A supportive environment focused on continuous learning, innovation, and impactful contributions.