Staff Software Engineer, Identity and Authorization

This is a fully remote position, open to applicants in Argentina.

📋 Description

• Create secure, scalable, and reusable identity and access solutions.

• Define the architectural vision for Domino’s centralized, relationship-based authorization framework utilizing SpiceDB.

• Clearly communicate architectural concepts and steer Engineering decision-making.

• Act as the technical expert on identity and authorization matters.

• Conduct design reviews and assist engineers in overcoming uncertainties.

• Enhance architecture, eliminate technical debt, and minimize maintenance efforts.

• Develop patterns for AI-assisted development while ensuring security and code quality are upheld.

• Assist the team in achieving a balance between quality and the speed of iteration.

• Enhance identity and user management experiences for enterprise clients.

• Evolve authorization systems, transition legacy access checks, and facilitate cloud-native identity integrations.

⛳️ Requirements

• Proven experience in evolving an enterprise-grade authorization system under live production conditions.

• Background in designing a new authentication system and transitioning from a legacy model (preferred).

• Experience on a platform team that supports other services within a larger engineering organization.

• Previous work at a company that develops authentication or authorization products (preferred).

• A concrete example of an authentication system that addressed recurring customer issues.

• A history of enhancing team designs, velocity, and quality.

• Hands-on experience with relationship-based or fine-grained authorization, including schema design and RBAC considerations.

• Strong understanding of OIDC and SAML; experience with Keycloak, Auth0, Okta, or ForgeRock is ideal.

• Practical experience with AWS IRSA, Azure Workload Identity, or GCP Workload Identity Federation.

• Familiarity with credential management systems such as Vault.

• Proficient in Go, Java, or a similar programming language.

• Experience deploying services on Kubernetes.

• API design experience for platforms utilized by other teams.

• Experience architecting authentication frameworks for enterprise clients.

• Real-world experience with AI coding tools while maintaining code quality and security standards.

🏝️ Benefits

• Emphasis on a growth mindset within a nurturing teaching and learning atmosphere.

• Encouragement for individuals from diverse backgrounds, genders, ethnicities, abilities, and sexual orientations to apply.