Software Engineer - Identity and Authorization

Responsibilities

• Lead identity and authorization projects from problem definition and technical design through implementation, launch, and iteration.
• Design authorization and credential models supporting critical user workflows and safe platform evolution.
• Partner with product, design, and customer-facing teams to translate enterprise security requirements into durable technical solutions.
• Establish engineering practices for quality, security, observability, and operational ownership.
• Provide technical leadership and mentorship as the team grows.

Requirements

• 4–5+ years of experience building production backend systems.
• Hands-on experience designing and implementing product authorization systems, including per-resource or per-object permissions, relationship-based access control, policy engines, or fine-grained authorization systems such as Zanzibar, OpenFGA, SpiceDB, or Cedar.
• Demonstrated end-to-end ownership from initial design through implementation, production rollout, and user-driven iteration.
• Experience developing and operating multi-tenant systems at scale where authorization checks are in the request path and latency and consistency matter.
• Comfort working across the stack, from product and application code through cloud and Kubernetes infrastructure.

Preferred Qualifications

• Experience with Python and Go.
• Production experience operating OpenFGA, SpiceDB, or a similar system beyond a proof of concept.
• Working knowledge of OAuth, OIDC, and SCIM at the protocol level.

Compensation and Benefits

• Competitive compensation, including meaningful equity.
• Medical, dental, and vision insurance fully covered for employees and dependents.
• Flexible paid time off and a company-wide winter break.
• Paid parental leave.
• Fertility and family-building stipend.
• Company-facilitated 401(k).