Staff Software Engineer, Konnect Core Platform

Job not on LinkedIn

🔥 0 minutes ago

🏄 California, Washington – Remote

🏄 California – Remote ☕ Washington – Remote

💵 $150k - $275k / year

⏰ Full Time

🔴 Lead

🧑‍💻 Full-stack Engineer

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Kong Inc.

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2017

💼 Consulting

📦 Logistics

🔌 API

💰 $100M Series D on 2021-02

Consulting • Logistics • API

Kong Inc. is a company that provides a comprehensive API platform designed to facilitate API management, AI integration, and developer productivity. It offers solutions like Kong Gateway, Kong Konnect, and a variety of other tools targeted at managing and optimizing the API lifecycle. Kong's platform supports multi-cloud environments and is built to deliver high performance and security. It is notably recognized by Gartner as a leader in API management and supports innovations across industries like financial services, healthcare, and technology. The company emphasizes flexibility, security, and speed, making it a favored choice for enterprises looking to enhance their digital services through APIs. Kong also supports a robust community of developers and provides extensive integrations and plugins to streamline API management and operations.

📋 Description

• Architect Kong Identity’s multi-tenant identity platform supporting complex organizational hierarchies, cross-tenant isolation, and enterprise-grade security controls • Design and implement advanced token management systems with refresh token rotation, proof-of-possession tokens, custom introspection, and real-time revocation • Lead development of an extensible claims engine with dynamic attribute resolution, contextual claim injection, and business logic evaluation • Architect global identity infrastructure with edge optimization, token caching, cross-region replication, and low-latency authentication • Design rate limiting, anomaly detection, and fraud prevention systems • Build enterprise identity federation capabilities, including SAML bridges, external IdP chaining, and custom protocol adapters • Lead developer-experience initiatives including SDKs, webhooks, audit logging, and real-time analytics dashboards • Architect client management systems with dynamic registration, credential rotation, and programmatic policy enforcement • Design plugin architecture for custom grant flows, protocol extensions, and third-party integrations • Drive compliance initiatives covering SOC 2, FedRAMP, GDPR, audit trails, data residency, and privacy-preserving token designs • Lead observability integrations for distributed tracing, metrics collection, and security event correlation • Mentor engineering teams on zero-trust architectures, workload identity, and service mesh integration patterns

🎯 Requirements

• 7+ years of experience building production identity platforms at identity providers or enterprise software companies • Proven track record handling millions of authentication requests daily • Deep expertise in OAuth 2.0 extensions including PKCE, mTLS, JWT bearer assertions, and token exchange • Expertise in OpenID Connect, OAuth 2.1, and GNAP • Experience architecting multi-tenant identity platforms with complex isolation, tenant-specific configurations, and enterprise features • Strong background in cryptographic protocols, advanced JWT patterns, key rotation, HSM integration, and post-quantum cryptography considerations • Experience with enterprise-scale analytics, real-time monitoring, and security event detection • Expertise in edge deployment, geo-distributed token validation, and cross-region data consistency • Understanding of SAML federation, LDAP/AD bridges, SCIM provisioning, and custom protocol adapters • Experience building SDKs, webhook systems, and extensible APIs • Experience with threat modeling, penetration testing coordination, and advanced attack prevention • Background in compliance, audit trail design, data residency controls, and privacy engineering • Experience supporting complex organizational structures, delegated administration, and fine-grained permissions • Expertise in horizontal scaling, caching architectures, and latency optimization • Knowledge of service mesh identity, workload identity bootstrapping, and container orchestration integration • Experience with identity protocol extensions, custom grant flows, and extensible identity platforms • Ability to lead technical initiatives in complex, regulated environments

🏖️ Benefits

• Equity • Bonus • Healthcare benefits • 401(k) plan • Short- and long-term disability benefits • Basic life and AD&D insurance