# Software Engineer, Identity

**Company:** [Scale AI](https://hotfix.jobs/companies/scale-ai)
**Location:** San Francisco, CA, New York, NY
**Role:** Security Engineering
**Salary:** $216k – $270k/yr
**Experience:** 4+ years
**Skills:** IAM, Terraform, Pulumi, Openfga, Authzed, Cedar, Topaz, Rebac, Oauth 2.0, OIDC, SAML, Jwt, AWS
**Posted:** 2026-06-30

> Build and manage secure identity infrastructure including authentication (SSO, MFA, SAML/OAuth/OIDC) and authorization (ReBAC, RBAC, ABAC) systems for AI data platforms. Requires 4+ years in infrastructure/identity engineering with hands-on authorization frameworks like OpenFGA/Authzed and IaC tools.

## Job Description

## Responsibilities
- Drive the design and implementation of identity infrastructure to ensure secure authentication and authorization across enterprise systems.
- Manage authentication mechanisms such as Single Sign-On (SSO), Multi-Factor Authentication (MFA), and federated identity solutions (SAML, OAuth, OpenID Connect).
- Manage authorization mechanisms such as Relation-based access control (ReBAC), Attribute-based access control (ABAC), Role-based access control (RBAC).
- Work with auditors and security teams to enforce identity governance policies to ensure compliance with security policies, industry regulations (e.g., NIST, SOC2, ISO 27001), and organizational standards.
- Present technical information to teams and stakeholders, providing guidance and insight on identity management and best practices.

## Requirements
- 4+ years of full-time engineering experience, post-graduation with specialties in infrastructure and identity systems.
- Infrastructure expertise – IAM controls, Infrastructure as Code (Terraform, Pulumi), microservice deployment best practices.
- Hands-on experience working with OpenFGA, Authzed, Cedar, Topaz, or similar authorization frameworks at scale.
- Strong understanding of Zanzibar-based ReBAC models, relationship tuples, and access control evaluation.
- Strong knowledge of authentication standards such as OAuth 2.0, OIDC, SAML, and JWT.
- Extensive experience in software development and a deep understanding of distributed systems and public cloud platforms (AWS preferred).
- Track record of independent ownership of successful engineering projects.
- Excellent communication and collaboration skills, and the ability to translate complex technical concepts to non-technical stakeholders.

## Nice-to-Haves
- Experience securing API access and implementing access control mechanisms at the application level.
- Multi-cloud infrastructure experience – AWS, Azure, GCP, and more.
- Proficiency in integrating IAM solutions with applications built using frameworks such as Java, Python, Node.js, or .NET.

## Compensation and Benefits
Compensation packages at Scale for eligible roles include base salary, equity, and benefits. The base salary range for this full-time position in the locations of San Francisco, New York, Seattle is: $216,000–$270,000 USD. Employees in eligible roles are also granted equity based compensation. Benefits include comprehensive health, dental and vision coverage, retirement benefits, a learning and development stipend, and generous PTO. This role may be eligible for additional benefits such as a commuter stipend.

## Similar roles

- [Security Engineer, Corporate Security](https://hotfix.jobs/jobs/67a3be58-d872-49bb-8e16-ed79c79c42ca) - Notion - San Francisco, CA - $220k – $260k/yr
- [Security Engineer, Cloud](https://hotfix.jobs/jobs/7aa4f9aa-c59f-41f0-b53a-e26a4a72d353) - Ramp - New York, NY - $211k – $291k/yr
- [Security Engineer - Vuln Management (Infra)](https://hotfix.jobs/jobs/05cc9fc9-4eb5-4cb5-9acc-a826869df1e0) - Replit - Foster City, CA - $210k – $270k/yr
- [Security Engineer - Vuln Management (Code)](https://hotfix.jobs/jobs/cd80bf4a-c5e4-4ca3-b4b4-bb639880e535) - Replit - Foster City, CA - $210k – $270k/yr
- [Software Engineer - Security](https://hotfix.jobs/jobs/f469195d-2a11-4426-8a73-c0c8b536199d) - Perplexity - San Francisco, CA - $210k – $385k/yr

**Apply:** https://hotfix.jobs/jobs/ca0746da-e661-47e9-b699-c90059ece83b
**Canonical:** https://hotfix.jobs/jobs/ca0746da-e661-47e9-b699-c90059ece83b