Staff Software Engineer, Identity & Access Management in United States Embassy at Jobgether

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Staff Software Engineer, Identity & Access Management based in United States.

This is a senior engineering opportunity focused on designing and scaling identity and access platforms that power secure experiences for a global customer base.
You will work at the intersection of authentication, authorization, and user management, building foundational systems used across the organization.
The role offers the chance to influence platform architecture, security practices, and developer enablement in a highly collaborative environment.
You will partner closely with security and engineering teams to create secure-by-design solutions aligned with enterprise compliance standards.
As a key technical contributor, you will drive initiatives from concept through production while helping shape the future direction of identity infrastructure.
This position is ideal for an experienced engineer who enjoys solving complex platform challenges and building reliable systems at scale.

As a Staff Software Engineer, you will own the design, development, and evolution of critical identity and access management capabilities. You will operate as a technical leader, shaping architecture, improving platform reliability, and enabling engineering teams through scalable self-service solutions.

• Design, build, and evolve identity platforms covering user management, authentication, authorization, and entitlement systems.
• Develop scalable authorization solutions using models such as RBAC, ABAC, and ReBAC to define and manage access across applications.
• Build and improve authentication systems, including integrations with identity providers and enterprise single sign-on workflows.
• Create and maintain user lifecycle management capabilities, including provisioning, deprovisioning, and identity data management.
• Partner with security teams to ensure platforms are secure by design and aligned with SOC 2 and GDPR requirements.
• Develop APIs and platform services that enable engineering teams to securely consume identity and access capabilities.
• Define technical roadmaps, identify opportunities for improvement, and drive initiatives independently from planning through delivery.
• Champion engineering excellence through strong testing practices, observability, reliability improvements, and maintainable architecture.
• Collaborate effectively across distributed teams and time zones while contributing to platform strategy and technical decision-making.
• Help establish scalable systems capable of supporting continued growth in users, customers, and product capabilities.

The ideal candidate is a highly experienced backend engineer with a strong background in identity, security, and platform engineering. You bring deep technical expertise, strong ownership, and the ability to independently solve complex infrastructure and application challenges.

• Extensive experience building and operating identity, authentication, or authorization platforms at scale.
• Strong backend engineering experience with Java, Spring Boot, and modern software development practices.
• Experience designing and consuming APIs using technologies such as REST, GraphQL, and gRPC.
• Strong knowledge of SQL, distributed systems, and event-driven architecture patterns.
• Experience with cloud and infrastructure technologies including AWS, GCP, Kubernetes, and Helm.
• Hands-on experience with identity and security standards such as OAuth 2.0, OIDC, JWT, SAML 2.0, enterprise SSO federation, and SCIM.
• Experience implementing authorization models including RBAC, ABAC, or ReBAC.
• Familiarity with automated testing practices, including TDD or similar quality-focused engineering approaches.
• Experience working within security-conscious environments and compliance frameworks such as SOC 2 or GDPR.
• Strong communication skills and the ability to collaborate with engineering, security, and cross-functional stakeholders.
• Ability to work autonomously, influence technical direction, and operate effectively in a distributed environment.
• Nice-to-have experience with tools and technologies such as Auth0, SpiceDB, Zanzibar-style authorization systems, Apollo Federation, or OpenTelemetry.

• Competitive base compensation range of $202,400 - $278,300 USD.
• Potential equity opportunities as part of the overall compensation package.
• Generous benefits program supporting employee health and wellbeing.
• Opportunity to work remotely within the United States.
• Chance to contribute to a high-impact platform used by thousands of enterprise customers.
• Collaborative environment with experienced engineers and cross-functional technical teams.
• Opportunity to influence architecture, security practices, and long-term platform strategy.
• Inclusive workplace culture focused on respect, innovation, and equal opportunity.
• Professional growth opportunities through challenging technical projects and ownership.