Senior Backend Engineer - Users Infrastructure
Build secure, distributed identity and authorization infrastructure for a multi-tenant healthcare platform. The role requires 5+ years of backend engineering experience, strong Go and distributed-systems expertise, and familiarity with modern authentication and authorization standards.
About the job
Responsibilities
- Architect and operate the foundational security and identity infrastructure used by Weave products.
- Lead the transition from legacy authorization to a globally distributed Identity and Access Management (IAM) platform using SpiceDB and Go.
- Own services for authenticating human and machine entities, balancing stateless scalability with real-time session revocation.
- Define fine-grained permission models, inheritance, and enforcement across a multi-tenant hierarchy of organizations and locations.
- Own internal SDKs, gRPC contracts, and middleware that enable downstream engineers to integrate security features.
- Manage federated identity and enterprise integration infrastructure, including SSO, SCIM, and machine-to-machine communication.
- Improve observability and operational performance, including monitoring and load-testing protocols for Tier-1 services.
- Maintain immutable, reliable audit logging pipelines and consistent identity data.
- Help establish the technical standards and operational culture for the India-based regional hub while collaborating asynchronously with US-based team members.
Requirements
- 5+ years of backend engineering experience, including significant experience building distributed systems in Go.
- Deep understanding of authentication and authorization primitives, including OAuth 2.0, OIDC, SAML, and JWT.
- Experience with complex data migrations, distributed architectures, and gRPC-based microservices.
- Exceptional written communication and ability to create technical design documents for distributed stakeholders.
Nice-to-haves
- Experience as an early member of a distributed team and building culture across time zones.
- Experience with zero-trust security practices, Zanzibar-style authorization, or SpiceDB.
- Strong reliability mindset, including shipping alerts, dashboards, and runbooks.
Compensation and Benefits
- Remote position.
- Employment is contingent upon successful completion of a background check.
Skills
Go, Spicedb, IAM, Oauth 2.0, OIDC, SAML, Jwt, gRPC, Microservices, Distributed Systems, SSO, SCIM, Zero Trust, Audit Logging, Load Testing
Similar jobs
Backend Engineering jobs
Coinbase
United States
Build and operate high-throughput blockchain infrastructure, APIs, and platform primitives integrating protocols such as Ethereum and Bitcoin with internal services. Requires 5+ years of software engineering experience, distributed-systems expertise, and hands-on crypto infrastructure experience.
Cloudflare
Atlanta, GADesign, build, and operate Cloudflare’s globally distributed cache and reverse-proxy data plane, improving performance, correctness, and resilience across the edge. Requires at least 4 years of production systems experience and proficiency in a systems or backend language.
Hinge Health
San Francisco, CA
Senior backend engineer designing and operating reliable billing and financial systems, APIs, data models, and distributed workflows. The role requires 5+ years of professional software development experience, strong backend expertise, and collaboration across Product, Finance, Operations, and Data.
ZoomInfo
Bengaluru, India
Leads the architecture and scaling of distributed backend systems for AI-powered talent search, matching, and agentic workflows. Requires 7+ years of backend experience, strong cloud and data expertise, and proficiency in a modern object-oriented language.
CommandLink
United StatesSenior individual contributor responsible for designing, building, operating, and improving large-scale backend services, APIs, and telemetry pipelines in Go and Python. The role requires production systems ownership, distributed-systems expertise, incident leadership, mentoring, and technical design leadership.