Staff Software Engineer, Identity & Access - AI Platform

Accountabilities

• • Own the technical direction for authentication (AuthN), authorization (AuthZ), and OBO delegation across agentic data and cloud platforms.

  • Define which emerging identity and agent-authorization patterns to adopt, adapt, or deliberately avoid as standards evolve.

  • Design, implement, and productionize identity infrastructure, including OAuth 2.1 authorization services, token vaults, delegated tool-access flows, and cryptographic delegation models.

  • Build mechanisms that allow agents to act on behalf of humans or other agents with a verifiable and auditable chain of authority.

  • Ensure identity systems integrate effectively with enterprise identity providers such as Okta, Microsoft Entra, Ping, and similar platforms.

  • Partner with engineering, security, and product teams to validate identity and delegation architectures against real-world enterprise security requirements.

  • Represent the technical approach in customer security discussions, technical documentation, and relevant industry or standards conversations.

  • Drive initiatives through production delivery, measuring success through reliable, secure, customer-ready systems rather than architecture proposals alone.

  • Mentor engineers across multiple teams and raise organizational capability in identity, access management, and delegation without formal management authority.

  • Track initiative progress, surface systemic challenges, communicate risks, and develop contingency and mitigation plans.

  • Contribute to strategic engineering discussions with peers and leadership to help shape technical direction and the broader engineering environment.

  Requirements

  • 10+ years of software development and delivery experience, with deep hands-on expertise in authentication, authorization, identity, or related security infrastructure.

  • Production experience with OAuth 2.0/2.1, OIDC, token exchange, delegation patterns, or technologies such as RFC 8693 and OBO flows.

  • Practical experience operating authorization servers, token-management infrastructure, or comparable identity systems at scale.

  • Strong understanding of emerging agent identity and authorization patterns, including MCP authentication, A2A, and cross-application access or token-exchange approaches.

  • Experience designing identity systems that federate with enterprise identity providers rather than replacing them.

  • Background working with security-conscious or regulated enterprise environments where identity and access decisions are subject to customer security review.

  • Demonstrated ability to establish technical direction across multiple engineering teams or organizations as an individual contributor.

  • Strong experience influencing through technical proposals, RFCs, design documentation, code, and collaboration rather than organizational authority.

  • Excellent written and verbal communication skills, with the ability to explain sophisticated identity and delegation concepts to engineers, security professionals, customers, and other stakeholders.

  • Comfortable working independently within a globally distributed engineering organization and collaborating openly through tools such as GitHub.

  • Self-directed, accountable, pragmatic, and comfortable operating in a fast-growing environment where technical decisions may need to be made before industry standards fully converge.

  • Preferred experience includes building or operating OAuth 2.1/OIDC authorization infrastructure, working directly with agent-specific identity protocols, contributing to identity or OAuth standards efforts, or holding previous Staff/Principal-level IC responsibilities.

  Benefits

  • U.S. base salary range of $220,000–$260,000, with individual compensation determined by role, level, location, experience, skills, education, and training.

  • Remote work opportunity for candidates in the United States; the broader organization operates as a globally distributed team.

  • High-autonomy Staff-level individual contributor role with significant technical ownership and cross-functional influence.

  • Opportunity to work on emerging identity, authorization, and agentic AI infrastructure where technical standards are actively developing.

  • People-first culture centered on trust, transparency, communication, and kindness.

  • Access to modern AI tools and a budget intended to support their practical use.

  • Opportunities to mentor engineers and shape technical practices across multiple engineering organizations.

  • Collaborative environment with engineering, security, product, and customer-facing teams.