Senior Backend Engineer, Identity & Access Management
Owns and evolves production authentication and identity infrastructure, including SSO, SCIM, MFA, sessions, and API credentials. The role requires 6+ years of backend engineering experience, production ownership, cloud expertise, and strong judgment around correctness, availability, and secure change.
About the job
Responsibilities
- Own LaunchDarkly’s authentication surface end to end, including single sign-on, SCIM provisioning, login and session flows, multi-factor authentication, and API key and token authentication.
- Build enterprise identity capabilities, including additional identity-provider integrations, multiple identity providers per account, and default MFA enforcement.
- Make the stack operable with SLOs, monitoring for certificate expiry and provisioning failures, actionable alerting, runbooks, and sustainable on-call practices.
- Partner with Product Security on threat modeling, audit logging, and compliance requirements including SOC 2 and FedRAMP.
- Set technical direction for identity and mentor engineers through design reviews.
Requirements
- 6+ years of professional software engineering experience, with significant work on complex backend applications.
- Experience building or operating production authentication and identity systems.
- A track record working on systems where correctness and availability are non-negotiable, including backward-compatible changes, staged rollouts, and safe cutovers.
- Proficiency in at least one backend language, such as Go, Rust, or Python.
- Familiarity with cloud infrastructure such as AWS or equivalent.
- Strong production ownership, including on-call responsibilities.
Nice to Have
- Protocol depth in SAML, OIDC/OAuth2, or SCIM.
- Integration experience with Okta, Microsoft Entra ID, Google Workspace, OneLogin, or Ping.
- Experience with MFA/WebAuthn, RBAC and authorization policy engines, or audit logging at multi-tenant scale.
- Experience engineering under compliance regimes such as SOC 2 or FedRAMP.
Compensation and Benefits
- Zone 1: San Francisco/Bay Area or NYC Metropolitan Area, Boston, Seattle — $191,800–$263,670.
- Zone 2: Irvine, LA, Monterey, Santa Barbara, Santa Rosa, Austin, Portland, Philadelphia, Chicago — $172,600–$237,270.
- Zone 3: All other US locations — $163,000–$224,070.
- Compensation may vary based on skills, experience, and location.
- Restricted Stock Units (RSUs), health, vision, and dental insurance, and mental health benefits are provided in addition to salary.
Skills
Go, TypeScript, Cockroachdb, Redis, AWS, Terraform, SAML, Oauth2, SCIM, MFA, Webauthn, RBAC, SOC 2, FedRAMP, OIDC
Similar jobs
Backend Engineering jobs
Coinbase
United States
Build and operate high-throughput blockchain infrastructure, APIs, and platform primitives integrating protocols such as Ethereum and Bitcoin with internal services. Requires 5+ years of software engineering experience, distributed-systems expertise, and hands-on crypto infrastructure experience.
Cloudflare
Atlanta, GADesign, build, and operate Cloudflare’s globally distributed cache and reverse-proxy data plane, improving performance, correctness, and resilience across the edge. Requires at least 4 years of production systems experience and proficiency in a systems or backend language.
Hinge Health
San Francisco, CA
Senior backend engineer designing and operating reliable billing and financial systems, APIs, data models, and distributed workflows. The role requires 5+ years of professional software development experience, strong backend expertise, and collaboration across Product, Finance, Operations, and Data.
CommandLink
United StatesSenior individual contributor responsible for designing, building, operating, and improving large-scale backend services, APIs, and telemetry pipelines in Go and Python. The role requires production systems ownership, distributed-systems expertise, incident leadership, mentoring, and technical design leadership.
Fetch
United States
Build and operate backend services, data pipelines, storage, and retrieval systems that provide trusted context to agentic platforms and product applications. The role requires 8+ years of software engineering experience, distributed-systems expertise, cloud infrastructure knowledge, and strong data modeling skills.