Staff Software Engineer, Konnect Core Platform

This is a fully remote position, open to applicants in California, +1 more state.

📋 Description

• Design the multi-tenant identity platform for Kong Identity, accommodating intricate organizational structures, cross-tenant isolation, and enterprise-level security measures.

• Create and execute sophisticated token management systems featuring refresh token rotation, proof-of-possession tokens, custom introspection, and real-time revocation.

• Spearhead the development of a flexible claims engine with dynamic attribute resolution, contextual claim injection, and business logic assessment.

• Construct a global identity infrastructure optimized for edge performance, token caching, cross-region replication, and low-latency authentication.

• Develop systems for rate limiting, anomaly detection, and fraud prevention.

• Establish enterprise identity federation capabilities, incorporating SAML bridges, external IdP chaining, and custom protocol adapters.

• Drive developer experience initiatives, including SDKs, webhooks, audit logging, and real-time analytics dashboards.

• Design client management systems featuring dynamic registration, credential rotation, and programmatic policy enforcement.

• Create a plugin architecture for custom grant flows, protocol extensions, and third-party integrations.

• Lead compliance efforts encompassing SOC 2, FedRAMP, GDPR, audit trails, data residency, and privacy-preserving token designs.

• Oversee observability integrations for distributed tracing, metrics collection, and security event correlation.

• Mentor engineering teams on zero-trust architectures, workload identity, and service mesh integration patterns.

⛳️ Requirements

• Over 7 years of experience in developing production identity platforms at identity providers or enterprise software firms.

• Demonstrated success in managing millions of authentication requests daily.

• Extensive knowledge of OAuth 2.0 extensions, including PKCE, mTLS, JWT bearer assertions, and token exchange.

• Proficient in OpenID Connect, OAuth 2.1, and GNAP.

• Experience in architecting multi-tenant identity platforms with complex isolation, tenant-specific settings, and enterprise functionalities.

• Strong foundation in cryptographic protocols, advanced JWT patterns, key rotation, HSM integration, and considerations for post-quantum cryptography.

• Background in enterprise-scale analytics, real-time monitoring, and security event detection.

• Expertise in edge deployment, geo-distributed token validation, and cross-region data consistency.

• Familiarity with SAML federation, LDAP/AD bridges, SCIM provisioning, and custom protocol adapters.

• Experience in building SDKs, webhook systems, and extensible APIs.

• Skills in threat modeling, coordination of penetration testing, and advanced attack prevention strategies.

• Background in compliance, audit trail design, data residency controls, and privacy engineering.

• Experience supporting complex organizational structures, delegated administration, and granular permissions.

• Expertise in horizontal scaling, caching architectures, and latency optimization.

• Knowledge of service mesh identity, workload identity bootstrapping, and integration with container orchestration.

• Experience with identity protocol extensions, custom grant flows, and extensible identity platforms.

• Capability to lead technical initiatives within complex, regulated environments.

🏝️ Benefits

• Equity

• Bonus

• Healthcare benefits

• 401(k) plan

• Short- and long-term disability benefits

• Basic life and AD&D insurance