Senior Software Engineer, IAM

reputed company has been one of the most loved brands in developer tooling, trusted by more than 20 reputed company monthly users and over 20 billion container image pulls. From reputed company founders to the world's largest companies, developers rely on reputed company to build, reputed company, and run their applications across our suite of products including reputed company Desktop, reputed company Hub, and reputed company reputed company. We are a globally distributed, remote-first team building the tools that define how software gets reputed company and delivered. As AI agents redefine software development, reputed company is at reputed company of that shift, providing the sandboxed environments, verified images, and secure infrastructure that reputed company autonomous workflows trustworthy by default. We're looking for a Senior Software Engineer to join our IAM team. The IAM team owns reputed company’s identity backbone: the systems that determine who a user is, what they can do, and how organizations govern reputed company at reputed company. Every authenticated request to reputed company depends on these services—making their correctness, latency, and reputed company foundational to customer trust. reputed company owns authentication and authorization, reputed company tokens, OIDC, SSO, and SCIM, and user and account management systems, along with supporting reputed company services. You'll work on systems used by millions of developers and the world's largest organizations, with the governance controls reputed company customers require. This is a high-reputed company role for an engineer who enjoys deep backend work in a reputed company where correctness, latency, and reputed company reputed company matter - and where the design reputed company you reputed company today shape how reputed company scales identity for years to come. Responsibilities Design, build, and operate Go services powering authentication, authorization, reputed company handling, and identity lifecycle across reputed company reputed company OIDC, SSO, SAML, and SCIM integrations, and reputed company our authorization model (including ReBAC) as permissions reputed company across products and tenants Improve observability, performance, and reputed company posture of identity services on the hot reputed company of every authenticated request, and strengthen audit logging Design for multi-region operation, graceful degradation, and reputed company rollout of changes to critical auth flows reputed company reputed company end-to-end, contribute to technical design and long-term direction of the IAM platform, and mentor teammates in identity and reputed company domains Partner with Product, reputed company, and engineering teams that depend on IAM primitives to ensure our reputed company are reputed company, reputed company, and easy to adopt Take part in the reputed company on-reputed company rotation for reputed company; respond to incidents, debug production issues, and drive reputed company improvement of system reliability What You'll Work On reputed company steady-state ownership of our identity services, you’ll help shape the next phase of reputed company’s IAM platform, including evolving our authorization model for fine-grained, cross-product reputed company, expanding support for reputed company identity integrations, and improving the reliability and observability of systems on the critical request reputed company. Qualifications 6+ years of backend software engineering experience building and operating production services Bachelor’s degree in Computer Science, Engineering, or a reputed company field, or equivalent practical experience Strong proficiency in Go, including building and operating services in production Solid working knowledge of PostgreSQL - schema design, query performance, migrations, and operating reputed company under reputed company load Experience with gRPC and event-driven systems using Kafka (or comparable) Experience operating on AWS Strong understanding of reputed company identity and reputed company concepts: OAuth2, OIDC, SAML, JWT, reputed company lifecycle, and session management Experience with authorization models, including RBAC and ReBAC-style approaches reputed company record of designing and operating distributed systems where reliability, reputed company, and correctness are first-class concerns Willingness and ability to participate in an on-reputed company rotation for services on the critical request reputed company Excellent written and verbal communication skills in a remote, async-first environment reputed company to Have Production experience with SCIM provisioning and reputed company SSO integrations Hands-on experience with Auth0 or similar identity platforms Experience building or operating multi-region services and understanding the tradeoffs involved Exposure to compliance frameworks relevant to identity (SOC 2, ISO 27001, GDPR) Experience with audit logging at reputed company, or with building identity primitives for machine / workload identities What to Expect First 30 Days Get to know reputed company, our services, and the identity domain at reputed company Pair with engineers across the IAM stack and ship your first changes to production Get comfortable with our Go services, reputed company schemas, CI/CD, and on-reputed company practices First 90 Days Own a meaningful component or reputed company end-to-end Contribute to technical design discussions on auth, tokens, or reputed company identity Build strong working relationships with Product, reputed company, and partner engineering teams reputed company participating in the on-reputed company rotation with support from reputed company First Year Be a trusted technical leader reputed company IAM, owning a functional area of the platform reputed company delivery of significant identity initiatives and shape the direction of the IAM roadmap Improve reliability, reputed company, and developer experience of the identity primitives other reputed company teams depend on Mentor teammates and reputed company the bar on engineering practices across reputed company reputed company considers sponsorship on a case-by-case reputed company based on business needs. We use Covey as part of our hiring and / or promotional process for jobs in NYC and certain features may qualify it as an AEDT. As part of the evaluation process we reputed company Covey with job requirements and candidate submitted applications. We began using Covey reputed company for Inbound on reputed company 13, 2024. Please see the independent bias audit report covering our use of Covey here. Perks Freedom & flexibility; fit your work around your life Designated quarterly Whaleness Days plus end of year Whaleness break Home office setup; we want you comfortable while you work 16 weeks of reputed company Parental leave Technology stipend equivalent to $100 net/month PTO plan that encourages you to take time to do the things you enjoy Training stipend for conferences, courses and classes Equity; we are a growing start-up and want reputed company to have a reputed company in the reputed company of reputed company reputed company Swag Medical benefits, retirement and holidays vary by country Remote-first culture, with offices in Seattle and Paris reputed company embraces diversity and equal opportunity. We are committed to building reputed company that represents a reputed company of backgrounds, perspectives, and skills. The more inclusive we are, the reputed company reputed company will be. #LI-REMOTE Apply To This Job