# Software Engineer, Governance

**Company:** [Retool](https://hotfix.jobs/companies/retool)
**Location:** San Francisco, CA
**Role:** DevOps / SRE
**Experience:** 2+ years
**Skills:** JavaScript, React, Postgres, Terraform, dbt, Databricks, RBAC, Abac, OAuth, SAML, Kubernetes, SCIM, Opa, Cedar
**Posted:** 2026-05-08

> Builds governance infrastructure for enterprise-scale Retool platform, including data access controls, admin tools, security monitoring, and organizational management systems. Requires 2-8 years full-stack experience with backend systems design and customer-focused problem-solving.

## Job Description

## Responsibilities
- Design and build data access control layer: policy modeling, query rewriting for security constraints, admin UX for rules.
- Redesign hub & admin setup: landing page, global search, guided setup, security insights, admin dashboard.
- Build organizational primitive for Projects: data model, permissions layer, team UI.
- Develop Automated Security Center & Admin Control Panel: surface issues, monitor usage, integrate with compliance tools.
- Create Spaces & Instance Management: enforce policies, identify misconfigurations.

## Requirements
- 2–8 years of professional software engineering experience, ideally at startups.
- Own technically challenging, cross-functional projects.
- Strong fundamentals across full stack, backend systems design, data modeling, scalable software.
- Clear communication in design docs, code reviews, discussions.
- Care about code quality, testing, improving codebase.
- Motivated by customer problems.

## Nice to Haves
- Terraform or infrastructure-as-code.
- dbt, Databricks, data pipeline tooling.
- Authorization, access control, security systems.
- Policy engines, query rewriting, data governance.
- RBAC, ABAC, Zanzibar, OPA, Cedar.
- OAuth, SAML, SCIM.
- Admin-facing UIs or platform tools.

## Similar roles

- [Software Engineer L2](https://hotfix.jobs/jobs/e51086c6-a570-4618-820b-b74f0e266de7) - Twilio - Remote - $117k – $172k/yr
- [Forward Deployed Infrastructure Engineer, Internship](https://hotfix.jobs/jobs/a75f39de-cb9b-44d4-81dd-091fda8e75d2) - Palantir - Palo Alto, CA
- [Software Engineer](https://hotfix.jobs/jobs/e999a5f4-c744-43d0-9154-41c0fcd88ebe) - Astronomer - New York, NY - $144k – $235k/yr
- [Software Engineer, Infrastructure](https://hotfix.jobs/jobs/810e9ab1-5e92-4cc8-92a1-2ef9a3a471ce) - Chime - San Francisco, CA - $133k – $184k/yr
- [Software Engineer, Cloud Networking](https://hotfix.jobs/jobs/8cdf75d0-36fb-4f0d-a795-f7b623d81d3b) - Airbnb - Remote - $157k – $185k/yr

**Apply:** https://hotfix.jobs/jobs/4b78a403-618e-4ec4-ad7d-fbe7b5070e07
**Canonical:** https://hotfix.jobs/jobs/4b78a403-618e-4ec4-ad7d-fbe7b5070e07