# Senior Software Engineer, Identity & Access

**Company:** [StackAI](https://hotfix.jobs/companies/stackai)
**Location:** San Francisco, CA, New York, NY
**Role:** Backend Engineering
**Salary:** $202k – $230k/yr
**Experience:** 5+ years
**Skills:** Python, FastAPI, OIDC, oauth2, SAML, RBAC, SCIM, opa, cedar, zanzibar
**Posted:** 2026-06-19

> Senior Software Engineer building the enterprise Identity & Access layer for StackAI (by Asana), including SSO (OIDC/SAML), RBAC, SCIM provisioning, delegated auth, and access governance to enable secure adoption by large regulated customers.

## Job Description

## What you'll do
- Own enterprise sign-on. Deliver SSO across OIDC and SAML so customers onboard with their own identity provider.
- Own authorization and RBAC. Build role-based access control with fine-grained, query-time enforcement across the product.
- Own provisioning and lifecycle. Deliver SCIM provisioning and directory sync so user and group management stays in step with the customer's directory.
- Own delegated and machine identity. Build token exchange, on-behalf-of flows, service accounts, and domain-wide delegation so agents and services act with scoped authority.
- Own access governance. Build the entitlements, session and token management, and controls that keep access clean and auditable at scale.

## What we're looking for
- 4+ years building backend systems, with significant time spent on identity, authentication, or authorization.
- Real depth in OIDC, OAuth2, SAML, token exchange, and multi-tenant RBAC.
- You've built or owned enterprise SSO and identity systems, with a strong grasp of identity-provider architecture and enterprise auth patterns.
- Strong in Python and modern backend frameworks (FastAPI or similar).
- You care about clean, well-architected access control and the experience of the administrators who manage it.
- Identity is broad. If you're strong on most of this and excited to grow into the rest, we'd like to hear from you, even if you don't check every box.

## Bonus points
- SCIM and directory sync at scale.
- Authorization frameworks and policy engines (OPA, Cedar, or Zanzibar-style systems).
- Entitlements, usage-based metering, or billing systems.
- Multi-tenant SaaS at scale.
- Startup or growth-stage experience.

## Similar roles

- [Senior Software Engineer, Engine & Distributed Systems](https://hotfix.jobs/jobs/142fc0de-9006-4f99-a6bc-8c50d3741d75) - StackAI - San Francisco, CA - $202k – $230k/yr
- [Senior Software Engineer](https://hotfix.jobs/jobs/1ab397f5-5435-4dfd-af3b-9c726c8407cd) - Mercury - Remote - $201k – $251k/yr
- [Senior Software Engineer, Streaming](https://hotfix.jobs/jobs/c74f3312-5241-4d70-85ff-1cefce151793) - Skydio - San Mateo, CA - $200k – $240k/yr
- [Postgres Product Engineer](https://hotfix.jobs/jobs/383d1f82-2b1d-4f73-8b74-475640a0429b) - Render - Remote - $204k – $280k/yr
- [Software Engineer, Backend](https://hotfix.jobs/jobs/542f1aa3-f562-44e7-a8de-caf3d127868d) - Mercor - San Francisco, CA - $200k – $500k/yr

**Apply:** https://hotfix.jobs/jobs/530df964-d55f-4211-9e61-f575fee58e3c
**Canonical:** https://hotfix.jobs/jobs/530df964-d55f-4211-9e61-f575fee58e3c