# Software Engineer, Enterprise Platform

**Company:** [Cursor](https://hotfix.jobs/companies/cursor)
**Location:** San Francisco, CA
**Role:** Backend Engineering
**Skills:** RBAC, Abac, SCIM, IAM, Audit Logging, APIs, Multi-Tenant, Authorization, SSO, Workos
**Posted:** 2026-03-12

> Builds enterprise platform infrastructure including organization management, RBAC authorization, audit logs, compliance features, and admin tools for large-scale engineering organizations. Requires deep experience with IAM systems, permission models, and shipping secure, scalable features end-to-end.

## Job Description

## What you’ll do

- **Build and evolve our organization management system** — multi-level org structures, groups, roles, lifecycle, and provisioning via SCIM, so admins can manage thousands of seats without friction.
- **Design and implement RBAC** with fine-grained roles, permissions, and resource scopes that cover organizations, teams, agents, and other resources — balancing security with developer ergonomics.
- **Extend enterprise settings and policies** — org-wide defaults, security policies (allowed models, MCPs, Tools, network restrictions), and configuration inheritance across different products.
- **Deepen our audit logging infrastructure** — comprehensive, queryable, tamper-evident audit trails that satisfy customer-specific compliance requirements.
- **Build admin APIs and internal tooling** that enterprise admins, customer success, and sales engineering depend on to manage organizations, investigate access issues, and onboard large accounts.
- **Ship compliance features end-to-end** — SSO enforcement, session management, allowlisting, data analytics, and the controls that procurement and security teams require before signing.
- **Partner with product, security, and infrastructure teams** to define enterprise platform abstractions that scale across the product without slowing down feature development.
- **Own** organization management, RBAC and authorization, enterprise settings and policies, audit logs, admin APIs, and compliance-related platform features. You will be a technical authority on how Cursor models identity, access, and governance for enterprise customers.

**You will not own** SSO/IdP integration at the protocol level (we use WorkOS) or billing and payments.

**Security and correctness are part of the job**, but the goal is to build systems with enough rigor and observability that enterprise operations are boring — not to manually triage every access control edge case.

## You may be a fit if

- You've built multi-tenant organization or IAM systems in production and have opinions on permission models, role inheritance, and policy evaluation.
- You've shipped RBAC or ABAC systems and understand the tradeoffs between flexibility and complexity.
- You deeply care about correctness in authorization and understand why \"fail closed\" matters.
- You can hold the tension between \"ship enterprise features fast\" and \"do not create security gaps or break existing access patterns.\"
- You feel comfortable shipping features end-to-end — from database schema and API design to admin UI and documentation.

## Similar roles

- [Software Engineer (Backend), Deliverability](https://hotfix.jobs/jobs/2784834d-42ef-4b0d-bb3c-b825cbae7c53) - Front - San Francisco, CA - $178k – $204k/yr
- [Backend Engineer](https://hotfix.jobs/jobs/b1af6614-7e82-451b-b33a-6e7723bb589c) - Scribe - San Francisco, CA - $140k – $185k/yr
- [Software Engineer, Codex -Enterprise Controls](https://hotfix.jobs/jobs/9fc148ac-afcb-4558-a41e-a772e8869a71) - OpenAI - San Francisco, CA - $230k – $385k/yr
- [Software Engineer III](https://hotfix.jobs/jobs/a91a8070-ade4-411a-a538-be8c46e121ab) - ZoomInfo - Bethesda, MD - $112k – $176k/yr
- [Software Engineer, Upstart Bank](https://hotfix.jobs/jobs/5dbad557-7d4b-47a1-a575-68c16e632c5f) - Upstart - Remote - $14k – $187k/yr

**Apply:** https://hotfix.jobs/jobs/12d1a70f-cd51-436b-ae94-532669ebeb50
**Canonical:** https://hotfix.jobs/jobs/12d1a70f-cd51-436b-ae94-532669ebeb50