Senior Staff Software Engineer – Identity & Access Management

This is a fully remote position, open to applicants in Canada.

📋 Description

• Oversee the design and development of Kaseya’s Identity and Access Management (IAM) platform.

• Establish a centralized identity foundation that supports authentication, authorization, governance, and compliance across various products and business domains.

• Provide technical leadership for the architecture of the platform and promote its adoption throughout engineering teams.

• Deliver secure and scalable identity services that cater to customers, employees, partners, APIs, and machine identities.

• Define the architectural and technical roadmap for the IAM platform across a range of products and services.

• Direct the design and execution of authentication, authorization, and identity governance functionalities.

• Develop and maintain core IAM platform services, APIs, and integrations.

• Propel platform adoption and migration efforts across engineering divisions.

• Create solutions that support RBAC, ABAC, delegated administration, and multi-tenant environments.

• Collaborate with Security, Compliance, and Product teams to fulfill governance and regulatory mandates.

• Lead architecture reviews and technical design discussions related to identity initiatives.

• Mentor engineers and set engineering standards for the development of the identity platform.

⛳️ Requirements

• Over 10 years of software engineering experience in building distributed systems or platform services.

• Proven experience in designing and implementing IAM, authentication, authorization, or identity governance solutions.

• Familiarity with OAuth 2.0, OpenID Connect (OIDC), SAML, JWTs, MFA, and enterprise SSO.

• Experience in implementing or integrating enterprise IAM platforms (e.g., Zitadel, Keycloak, Authentik, Okta, Auth0, Ping Identity).

• Skilled in designing secure, scalable services within cloud-based or SaaS environments.

• Experienced in designing multi-tenant identity platforms or administration delegation models.

• Knowledge of RBAC, ABAC, policy-based authorization, or entitlement management.

• Experience integrating with enterprise identity providers such as Microsoft Entra ID, Okta, Google Workspace, or Active Directory.

• Familiarity with policy engines like Open Policy Agent (OPA) or Cedar.

• Experience with machine identities, secrets management, or workload authentication.

• Proven track record in leading large-scale platform migrations or modernization projects.

• Knowledge of compliance requirements including SOC 2, ISO 27001, HIPAA, PCI-DSS, or NIST.

🏝️ Benefits

• Kaseya offers equal employment opportunities to all employees and applicants without discrimination based on race, religion, age, ancestry, gender, sex, sexual orientation, national origin, citizenship status, physical or mental disability, veteran status, marital status, or any other characteristic protected by applicable law.