Search Remote Jobs

Staff Software Engineer – Identity and Authorization

🕒 October 19

🇨🇦 Canada – Remote

⏰ Full Time

🔴 Lead

🧑‍💻 Full-stack Engineer

Where this job comes from

Posted on Domino Data Lab's careers page, not through a job board

First seen by Remote Rocketship October 19

Still open on Domino Data Lab's site. Checked 2 hours ago.

Logo of Domino Data Lab

Domino Data Lab

201 - 500 employees

Founded 2013

🤖 Artificial Intelligence

🏢 Enterprise

☁️ SaaS

💰 Series F on 2022-06

Artificial Intelligence • Enterprise • SaaS

Domino Data Lab is a company that empowers AI-driven enterprises to build and manage AI at scale through its Enterprise AI Platform. The platform provides an integrated experience for model development, MLOps, collaboration, and governance, enabling global enterprises to innovate across various sectors. Domino supports better medicinal development, productive agriculture, and competitive product creation. Established in 2013 and backed by notable investors like Sequoia Capital and NVIDIA, Domino enables companies to optimize AI deployment effectively.

📋 Description

• Design and evolve centralized, fine-grained, relationship-based authorization primitives across the platform • Harden the authorization layer for enterprise and public-sector scale, reliability, and security • Plan and execute migration from legacy access checks without disrupting customers • Rethink group and organizational hierarchy modeling for large enterprises • Deepen cloud workload identity integration, starting with AWS IRSA and extending to Azure and GCP equivalents • Design core identity and access capabilities with clean interfaces and flexible abstractions for company-wide adoption • Establish patterns for AI-assisted development while maintaining security and code quality • Set architectural direction for secure, scalable identity and access solutions • Communicate complex architectural decisions clearly across Engineering • Serve as the technical authority for engineers and teams building on IDSM • Lead design reviews, unblock engineers, and champion flexible abstractions and well-designed interfaces • Improve architecture, remove technical debt, and reduce ongoing maintenance • Help the team balance quality with speed of iteration • Improve identity and user-management experiences for enterprise customers

🎯 Requirements

• Track record of evolving an enterprise-grade authorization system under real production traffic • Experience designing a new authorization system and migrating from a legacy approach (a plus) • Experience on a platform team supporting other services within a larger engineering organization • Background at a company that builds authentication or authorization products (a plus) • Concrete example of an authorization system that solved recurring customer challenges • History of improving team designs, velocity, and quality • Hands-on relationship-based or fine-grained authorization experience, including schema design with relations, permissions, and caveats, and understanding tradeoffs versus traditional RBAC • Solid grounding in OIDC and SAML; experience with Keycloak, Auth0, Okta, or ForgeRock is preferred • Practical workload identity experience with AWS IRSA, Azure Workload Identity, or GCP Workload Identity Federation • Familiarity with credential management systems such as Vault • Strong Go, Java, or comparable language skills • Experience running services on Kubernetes • API design experience from owning a platform used by other teams • Experience architecting authentication and authorization frameworks that scale to enterprise customers • Real-world experience using AI coding tools while maintaining code quality and security rigor

🏖️ Benefits

• Growth mindset and continuous improvement culture • Environment of teaching and learning with tools to support employee success • Diverse and inclusive workplace encouraging people of all backgrounds, genders, ethnicities, abilities, and sexual orientations to apply

Apply Now

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Similar Jobs

🕒 October 16

CircleCI

201 - 500

☁️ SaaS

Staff Software Engineer owning Kubernetes infrastructure, release tooling, and observability for CircleCI’s self-hosted CI/CD platform. Improving installation, upgrades, and operations for regulated and air-gapped customers.

🇨🇦 Canada – Remote

💵 $195k - $265k / year

⏰ Full Time

🔴 Lead

🧑‍💻 Full-stack Engineer

🕒 October 12

AlphaSense

1001 - 5000

💼 Consulting

🏥 Healthcare

📣 Marketing

Staff Engineer building AlphaSense’s identity, authentication, authorization, and user management platform. Scaling secure APIs and infrastructure for enterprise market-intelligence customers.

🇨🇦 Canada – Remote

💵 $164.4k - $226.6k / year

💰 Debt Financing on 2022-06

⏰ Full Time

🔴 Lead

🧑‍💻 Full-stack Engineer

🕒 October 8

Dropbox

1001 - 5000

💼 Consulting

🏭 Manufacturing

📦 Logistics

Principal Software Engineer shaping Dropbox’s customer-facing products, foundational platforms, and AI strategy. Driving company-wide technical direction and hands-on systems development.

🇨🇦 Canada – Remote

⏰ Full Time

🔴 Lead

🧑‍💻 Full-stack Engineer

🕒 October 7

AlphaSense

1001 - 5000

💼 Consulting

🏥 Healthcare

📣 Marketing

Staff Software Engineer owning AlphaSense’s entity data platform. Building reliable AI-assisted systems for ingesting, resolving, and delivering trusted market intelligence data.

🇨🇦 Canada – Remote

💵 $164.4k - $226.6k / year

💰 Debt Financing on 2022-06

⏰ Full Time

🔴 Lead

🧑‍💻 Full-stack Engineer

🕒 October 5

Vanta

201 - 500

📋 Compliance

🔐 Security

☁️ SaaS

Staff Software Engineer shaping Vanta’s enterprise organizational model. Building secure, multi-tenant structures for businesses using Vanta’s trust management platform.

🇨🇦 Canada – Remote

💰 $40M Series B on 2022-10

⏰ Full Time

🔴 Lead

🧑‍💻 Full-stack Engineer

Developed by Lior Neu-ner. I'd love to hear your feedback — Get in touch via DM or support@remoterocketship.com
Follow Remote Rocketship on LinkedInFollow Remote Rocketship on InstagramFollow Remote Rocketship on FacebookFollow Remote Rocketship on TikTok