Kong3w ago

Staff Software Engineer, Konnect Core Platform

Architects and leads development of Kong Identity’s globally distributed, multi-tenant identity platform, including token management, federation, security, compliance, and developer tooling. Requires 7+ years building production identity systems and deep expertise in modern identity protocols and high-scale infrastructure.

About the job

Responsibilities

Architect Kong Identity’s multi-tenant identity platform supporting organizational hierarchies, cross-tenant isolation, and enterprise security controls.
Design token management systems with refresh token rotation, proof-of-possession tokens, custom token introspection, and real-time revocation.
Lead development of an extensible claims engine for dynamic attribute resolution, contextual claim injection, and business-logic evaluation.
Architect global identity infrastructure with edge optimization, token caching, and cross-region replication.
Design rate limiting, anomaly detection, and fraud prevention systems.
Build identity federation capabilities, including SAML bridges, external identity-provider chaining, and custom protocol adapters.
Lead developer-experience initiatives including SDKs, webhooks, audit logging, and real-time analytics dashboards.
Architect client management systems with dynamic registration, credential rotation, and programmatic policy enforcement.
Design a plugin architecture for custom grant flows, protocol extensions, and third-party integrations.
Drive compliance initiatives covering SOC 2, FedRAMP, GDPR, audit trails, data residency, and privacy-preserving token designs.
Integrate identity systems with observability platforms for distributed tracing, metrics, and security-event correlation.
Mentor engineering teams on zero-trust architecture, workload identity, and service-mesh integration.

Requirements

7+ years of experience building production identity platforms at identity providers or enterprise software companies.
Expertise in OAuth 2.0 extensions including PKCE, mTLS, JWT bearer assertions, and token exchange; OpenID Connect; and emerging standards such as OAuth 2.1 and GNAP.
Experience architecting multi-tenant identity platforms with tenant isolation, tenant-specific configuration, and enterprise features.
Strong background in cryptographic protocols, JWT, key rotation, HSM integration, and post-quantum cryptography considerations.
Experience building identity analytics, real-time monitoring, and security-event detection systems at enterprise scale.
Experience with global identity infrastructure, edge deployment, geo-distributed token validation, and cross-region consistency.
Understanding of SAML federation, LDAP/Active Directory bridges, SCIM provisioning, and custom protocol adapters.
Experience building developer-focused identity platforms with SDKs, webhooks, and extensible APIs.
Experience with threat modeling, penetration-testing coordination, and attack-prevention mechanisms.
Background in compliance and regulatory requirements for identity systems, including audit trails, data residency, and privacy engineering.
Experience supporting complex organizational structures, delegated administration, and fine-grained permissions.
Expertise in horizontal scaling, caching architectures, and latency optimization.
Knowledge of service-mesh identity, workload-identity bootstrapping, and container-orchestration integration.
Experience with identity protocol extensions, custom grant flows, and extensible identity platforms.
Ability to lead technical initiatives in complex, regulated environments while balancing innovation, security, and compliance.