Staff Software Engineer – Identity and Authorization

🔥 5 minutes ago

🇨🇦 Canada – Remote

⏰ Full Time

🔴 Lead

🧑‍💻 Full-stack Engineer

👻 Ghost score 11%

infoinfo
Apply Now
Find Similar Remote Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Logo of Domino Data Lab

Domino Data Lab

201 - 500 employees

Founded 2013

🤖 Artificial Intelligence

🏢 Enterprise

☁️ SaaS

💰 Series F on 2022-06

Artificial Intelligence • Enterprise • SaaS

Domino Data Lab is a company that empowers AI-driven enterprises to build and manage AI at scale through its Enterprise AI Platform. The platform provides an integrated experience for model development, MLOps, collaboration, and governance, enabling global enterprises to innovate across various sectors. Domino supports better medicinal development, productive agriculture, and competitive product creation. Established in 2013 and backed by notable investors like Sequoia Capital and NVIDIA, Domino enables companies to optimize AI deployment effectively.

📋 Description

• Design and evolve centralized, fine-grained, relationship-based authorization primitives across the platform • Harden the authorization layer for enterprise and public-sector scale, reliability, and security • Plan and execute migration from legacy access checks without disrupting customers • Rethink group and organizational hierarchy modeling for large enterprises • Deepen cloud workload identity integration, starting with AWS IRSA and extending to Azure and GCP equivalents • Design core identity and access capabilities with clean interfaces and flexible abstractions for company-wide adoption • Establish patterns for AI-assisted development while maintaining security and code quality • Set architectural direction for secure, scalable identity and access solutions • Communicate complex architectural decisions clearly across Engineering • Serve as the technical authority for engineers and teams building on IDSM • Lead design reviews, unblock engineers, and champion flexible abstractions and well-designed interfaces • Improve architecture, remove technical debt, and reduce ongoing maintenance • Help the team balance quality with speed of iteration • Improve identity and user-management experiences for enterprise customers

🎯 Requirements

• Track record of evolving an enterprise-grade authorization system under real production traffic • Experience designing a new authorization system and migrating from a legacy approach (a plus) • Experience on a platform team supporting other services within a larger engineering organization • Background at a company that builds authentication or authorization products (a plus) • Concrete example of an authorization system that solved recurring customer challenges • History of improving team designs, velocity, and quality • Hands-on relationship-based or fine-grained authorization experience, including schema design with relations, permissions, and caveats, and understanding tradeoffs versus traditional RBAC • Solid grounding in OIDC and SAML; experience with Keycloak, Auth0, Okta, or ForgeRock is preferred • Practical workload identity experience with AWS IRSA, Azure Workload Identity, or GCP Workload Identity Federation • Familiarity with credential management systems such as Vault • Strong Go, Java, or comparable language skills • Experience running services on Kubernetes • API design experience from owning a platform used by other teams • Experience architecting authentication and authorization frameworks that scale to enterprise customers • Real-world experience using AI coding tools while maintaining code quality and security rigor

🏖️ Benefits

• Growth mindset and continuous improvement culture • Environment of teaching and learning with tools to support employee success • Diverse and inclusive workplace encouraging people of all backgrounds, genders, ethnicities, abilities, and sexual orientations to apply

Apply Now

Similar Jobs

🕒 2 days ago

CircleCI

201 - 500

☁️ SaaS

Staff Software Engineer owning Kubernetes infrastructure, release tooling, and observability for CircleCI’s self-hosted CI/CD platform. Improving installation, upgrades, and operations for regulated and air-gapped customers.

🕒 6 days ago

AlphaSense

1001 - 5000

💼 Consulting

🏥 Healthcare

📣 Marketing

Staff Engineer building AlphaSense’s identity, authentication, authorization, and user management platform. Scaling secure APIs and infrastructure for enterprise market-intelligence customers.

🇨🇦 Canada – Remote

💵 $164.4k - $226.6k / year

💰 Debt Financing on 2022-06

⏰ Full Time

🔴 Lead

🧑‍💻 Full-stack Engineer

🕒 October 7

AlphaSense

1001 - 5000

💼 Consulting

🏥 Healthcare

📣 Marketing

Staff Software Engineer owning AlphaSense’s entity data platform. Building reliable AI-assisted systems for ingesting, resolving, and delivering trusted market intelligence data.

🇨🇦 Canada – Remote

💵 $164.4k - $226.6k / year

💰 Debt Financing on 2022-06

⏰ Full Time

🔴 Lead

🧑‍💻 Full-stack Engineer

🕒 October 5

Vanta

201 - 500

📋 Compliance

🔐 Security

☁️ SaaS

Staff Software Engineer shaping Vanta’s enterprise organizational model. Building secure, multi-tenant structures for businesses using Vanta’s trust management platform.

🕒 October 2

Xsolla

201 - 500

💼 Consulting

📣 Marketing

📦 Logistics

Staff Engineer owning smart wallets and account abstraction for Xsolla's Web3 platform. Designing custody, signing, gas sponsorship, and recovery infrastructure for game players.