Staff Software Engineer – Identity and Authorization

This is a fully remote position, open to applicants in Canada.

📋 Description

• Create and enhance centralized, fine-grained, relationship-based authorization frameworks throughout the platform.

• Strengthen the authorization layer to meet the demands of enterprise and public-sector environments, ensuring reliability and security.

• Strategize and implement the migration from outdated access checks while maintaining seamless customer experience.

• Reevaluate group and organizational hierarchy modeling suited for large enterprises.

• Advance cloud workload identity integration, beginning with AWS IRSA and expanding to Azure and GCP counterparts.

• Develop core identity and access functionalities with clear interfaces and adaptable abstractions for organization-wide use.

• Establish guidelines for AI-enhanced development while preserving security and code quality.

• Set the architectural vision for secure and scalable identity and access solutions.

• Articulate complex architectural choices effectively across Engineering teams.

• Act as the technical authority for engineers and teams utilizing IDSM.

• Facilitate design reviews, assist engineers in overcoming obstacles, and advocate for flexible abstractions and well-crafted interfaces.

• Enhance architecture, eliminate technical debt, and decrease ongoing maintenance efforts.

• Assist the team in balancing quality with the speed of iterations.

• Enhance identity and user management experiences tailored for enterprise clients.

⛳️ Requirements

• Proven experience in evolving an enterprise-grade authorization system under actual production conditions.

• Background in designing a new authorization system and transitioning from a legacy model (preferred).

• Experience on a platform team that supports other services within a broader engineering organization.

• History of working at a company that develops authentication or authorization solutions (preferred).

• Concrete examples of an authorization system addressing recurring customer challenges.

• Track record of enhancing team designs, velocity, and quality standards.

• Practical experience with relationship-based or fine-grained authorization, including schema design involving relations, permissions, caveats, and understanding trade-offs compared to traditional RBAC.

• Strong foundation in OIDC and SAML; experience with Keycloak, Auth0, Okta, or ForgeRock is advantageous.

• Hands-on experience with workload identity in environments such as AWS IRSA, Azure Workload Identity, or GCP Workload Identity Federation.

• Familiarity with credential management systems like Vault.

• Proficient in Go, Java, or similar programming languages.

• Experience in deploying services on Kubernetes.

• API design experience from overseeing a platform utilized by other teams.

• Experience architecting authentication and authorization frameworks that can scale for enterprise clients.

• Practical experience employing AI coding tools while upholding code quality and security standards.

🏝️ Benefits

• Growth mindset and a culture of continuous improvement.

• An environment dedicated to teaching and learning, equipped with tools that foster employee success.

• A diverse and inclusive workplace that encourages individuals from all backgrounds, genders, ethnicities, abilities, and sexual orientations to apply.