Senior Backend Engineer - Identity & Access Management

Responsibilities

• Build scalable, secure IAM services that enable new features and products across the onX suite of apps
• Design and implement backend systems focusing on observability, fault-tolerance, security, and high performance
• Drive architectural decisions related to Identity and Access Management, ensuring alignment with and advancing our broader platform strategy
• Define and implement SLIs/SLOs for IAM services; drive reliability engineering practices including incident response and performance optimization
• Write thorough unit, integration, and acceptance tests to ensure high service quality and maintainability
• Document APIs, service architectures, and technical decisions for internal stakeholders and external partners as needed
• Collaborate closely with fellow engineers, product managers, and other stakeholders through design reviews, paired programming, and cross-functional planning sessions
• Leverage and extend existing onX services and platform patterns to drive consistency and reduce duplication
• Proactively improve system monitoring, alerting, diagnostics, and operational readiness of IAM-related services
• Participate in an on-call rotation to ensure backend services remain highly available and reliable
• Mentor and share knowledge with engineers on your team
• Lead by example and embody onX's company values, fostering a culture of technical excellence, ownership, and collaboration

Requirements

• B.S., M.S., or equivalent experience in computer science or a related field
• Eight or more years of professional software development experience, with API development as a primary focus for at least three of those years
• Strong Go/Golang backend development experience with RESTful API design
• Experience building and debugging distributed, scalable, highly available microservices architecture
• Solid understanding of identity systems: OAuth 2.0, session management, bearer token authentication, SSO integrations
• Experience with distributed databases (CockroachDB or similar PostgreSQL-compatible distributed systems) and relational databases (PostgreSQL, MySQL)
• Excellence in designing and developing modern APIs and scalable systems that ensure reliability and extensibility
• Familiarity with Docker, Kubernetes, and infrastructure-as-code technologies such as Terraform
• Strong computer science foundation
• Security-first mindset -- you think about threat models, secure defaults, and defense in depth as part of your design process
• You evaluate technologies and solutions based on merit, stability, performance, and the ability to debug
• Ability to write maintainable, well-tested code that's easy for others to understand
• A strong sense of ownership of your work
• Advocacy for customers -- both internal colleagues and end users -- and their experience
• Permanent US work authorization is a condition of employment with onX

Preferred Qualifications

• Experience with identity platforms such as Ory Kratos, Auth0, Cognito, or similar
• Experience with the Ory Stack, especially Hydra, Kratos, and Oathkeeper
• Experience with Authzed SpiceDB, Google Zanzibar, or AWS Cedar for fine-grained authorization
• Understanding of mobile authentication patterns: WebView vs. browser auth tradeoffs, token-based flows across iOS/Android/web
• Reliability engineering experience: SLI/SLO implementation, incident response, performance optimization
• SOC2 compliance experience or familiarity with security audit frameworks
• Experience with Elixir or the Phoenix Framework
• Familiarity with Google Cloud Platform
• Experience working with a distributed team

Compensation

• Base salary: $146,000 to $182,000 upon hire, varying based on experience, skills, certifications, and education
• Full-time employees eligible for grant of common share options with vesting schedule
• Potential annual bonus of 10% based on company performance