Senior Software Engineer, Identity & Access
Senior Software Engineer building the enterprise Identity & Access layer for StackAI (by Asana), including SSO (OIDC/SAML), RBAC, SCIM provisioning, delegated auth, and access governance to enable secure adoption by large regulated customers.
About the job
What you'll do
- Own enterprise sign-on. Deliver SSO across OIDC and SAML so customers onboard with their own identity provider.
- Own authorization and RBAC. Build role-based access control with fine-grained, query-time enforcement across the product.
- Own provisioning and lifecycle. Deliver SCIM provisioning and directory sync so user and group management stays in step with the customer's directory.
- Own delegated and machine identity. Build token exchange, on-behalf-of flows, service accounts, and domain-wide delegation so agents and services act with scoped authority.
- Own access governance. Build the entitlements, session and token management, and controls that keep access clean and auditable at scale.
What we're looking for
- 4+ years building backend systems, with significant time spent on identity, authentication, or authorization.
- Real depth in OIDC, OAuth2, SAML, token exchange, and multi-tenant RBAC.
- You've built or owned enterprise SSO and identity systems, with a strong grasp of identity-provider architecture and enterprise auth patterns.
- Strong in Python and modern backend frameworks (FastAPI or similar).
- You care about clean, well-architected access control and the experience of the administrators who manage it.
- Identity is broad. If you're strong on most of this and excited to grow into the rest, we'd like to hear from you, even if you don't check every box.
Bonus points
- SCIM and directory sync at scale.
- Authorization frameworks and policy engines (OPA, Cedar, or Zanzibar-style systems).
- Entitlements, usage-based metering, or billing systems.
- Multi-tenant SaaS at scale.
- Startup or growth-stage experience.
Skills
Python, FastAPI, OIDC, Oauth2, SAML, RBAC, SCIM, Opa, Cedar, Zanzibar
Similar jobs
Backend Engineering jobs
Bestow
United States
Senior backend engineer responsible for designing, operating, and scaling IPC services across Bestow’s insurance platform. The role requires 5+ years of backend experience, strong Go and Python skills, distributed-systems expertise, and production cloud infrastructure experience.
Machinify
United States
Senior backend engineer responsible for architecting and shipping scalable, reliable web applications and distributed systems for a healthcare audit product. The role requires 8+ years of backend experience, strong Java or Scala expertise, cloud-scale systems experience, and the ability to mentor engineers and adopt AI-assisted development practices.
Snowflake
Bellevue, WA
Design and build scalable systems that monitor, govern, and optimize cloud spending across Snowflake. The role requires 7+ years of production systems experience, strong programming and architectural skills, and expertise in cloud efficiency or observability.
Snowflake
Menlo Park, CA
Senior software engineer responsible for architecting and scaling Snowflake’s multi-cloud managed database infrastructure, including distributed systems, automation, reliability, and security. Requires 7+ years of backend systems experience and strong proficiency in cloud platforms and infrastructure automation.
Snowflake
Menlo Park, CA
Build scalable backend systems and user-facing workflow features for Observe by Snowflake’s observability platform. The role requires senior-level software engineering experience, strong distributed-systems foundations, and proficiency in Go or another high-performance systems language.