# Staff Software Engineer, Konnect Core Platform

**Company:** [Kong](https://hotfix.jobs/companies/kong)
**Location:** Remote
**Role:** Backend Engineering
**Salary:** $150k – $275k/yr
**Experience:** 7+ years
**Skills:** Oauth 2.0, Openid Connect, Oauth 2.1, Gnap, Pkce, Mtls, Jwt, SAML, SCIM, Ldap, Hsm, Kubernetes, Distributed Systems, Zero Trust, Service Mesh
**Posted:** 2026-08-17

> Architects and leads development of Kong Identity’s globally distributed, multi-tenant identity platform, including token management, federation, security, compliance, and developer tooling. Requires 7+ years building production identity systems and deep expertise in modern identity protocols and high-scale infrastructure.

## Job Description

## Responsibilities
- Architect Kong Identity’s multi-tenant identity platform supporting organizational hierarchies, cross-tenant isolation, and enterprise security controls.
- Design token management systems with refresh token rotation, proof-of-possession tokens, custom token introspection, and real-time revocation.
- Lead development of an extensible claims engine for dynamic attribute resolution, contextual claim injection, and business-logic evaluation.
- Architect global identity infrastructure with edge optimization, token caching, and cross-region replication.
- Design rate limiting, anomaly detection, and fraud prevention systems.
- Build identity federation capabilities, including SAML bridges, external identity-provider chaining, and custom protocol adapters.
- Lead developer-experience initiatives including SDKs, webhooks, audit logging, and real-time analytics dashboards.
- Architect client management systems with dynamic registration, credential rotation, and programmatic policy enforcement.
- Design a plugin architecture for custom grant flows, protocol extensions, and third-party integrations.
- Drive compliance initiatives covering SOC 2, FedRAMP, GDPR, audit trails, data residency, and privacy-preserving token designs.
- Integrate identity systems with observability platforms for distributed tracing, metrics, and security-event correlation.
- Mentor engineering teams on zero-trust architecture, workload identity, and service-mesh integration.

## Requirements
- 7+ years of experience building production identity platforms at identity providers or enterprise software companies.
- Expertise in OAuth 2.0 extensions including PKCE, mTLS, JWT bearer assertions, and token exchange; OpenID Connect; and emerging standards such as OAuth 2.1 and GNAP.
- Experience architecting multi-tenant identity platforms with tenant isolation, tenant-specific configuration, and enterprise features.
- Strong background in cryptographic protocols, JWT, key rotation, HSM integration, and post-quantum cryptography considerations.
- Experience building identity analytics, real-time monitoring, and security-event detection systems at enterprise scale.
- Experience with global identity infrastructure, edge deployment, geo-distributed token validation, and cross-region consistency.
- Understanding of SAML federation, LDAP/Active Directory bridges, SCIM provisioning, and custom protocol adapters.
- Experience building developer-focused identity platforms with SDKs, webhooks, and extensible APIs.
- Experience with threat modeling, penetration-testing coordination, and attack-prevention mechanisms.
- Background in compliance and regulatory requirements for identity systems, including audit trails, data residency, and privacy engineering.
- Experience supporting complex organizational structures, delegated administration, and fine-grained permissions.
- Expertise in horizontal scaling, caching architectures, and latency optimization.
- Knowledge of service-mesh identity, workload-identity bootstrapping, and container-orchestration integration.
- Experience with identity protocol extensions, custom grant flows, and extensible identity platforms.
- Ability to lead technical initiatives in complex, regulated environments while balancing innovation, security, and compliance.

## Similar jobs

- [Staff Engineer, Search Systems](https://hotfix.jobs/jobs/596ef3d9-1d62-46f7-9c7b-e75ddbb3754d) - MongoDB - San Francisco, CA - $151k – $297k/yr
- [Staff Backend Engineer, Database Automation](https://hotfix.jobs/jobs/ba3b028d-95ae-4f7f-9f85-ea5553f732a9) - GitLab - Remote - $153k – $259k/yr
- [Staff Backend Engineer](https://hotfix.jobs/jobs/127bb501-4fd5-435d-92d9-d47c9bf13f75) - GitLab - Remote - $153k – $259k/yr
- [Staff Software Engineer, Backend](https://hotfix.jobs/jobs/0971f827-acba-45c6-b582-7ed16106c518) - Nango - Remote - $140k – $220k/yr
- [Staff Software Engineer, Metadata](https://hotfix.jobs/jobs/16e23b4d-e57c-4aa5-a453-30ec7d50efaa) - Fivetran - Remote - $162k – $199k/yr

**Apply:** https://hotfix.jobs/jobs/4b1d4b58-51df-4ae6-8eef-7b2b793fc43d
**Canonical:** https://hotfix.jobs/jobs/4b1d4b58-51df-4ae6-8eef-7b2b793fc43d