Source Job

Global Unlimited PTO

  • Define and own the technical architecture for authentication and authorization across the SimSpace platform.
  • Lead the design and development of Keycloak-based identity infrastructure and authorization layer using ReBAC model.
  • Partner with technical leaders to translate business and security requirements into clear technical roadmaps.

OAuth 2.0 OIDC Kubernetes API Design

20 jobs similar to Staff Software Engineer, Identity & Access Management

Jobs ranked by similarity.

United States

  • Lead the design and evolution of Kaseya’s IAM platform, defining architecture and technical direction across multiple products.
  • Build and operate core IAM platform services, APIs, and integrations for authentication, authorization, and identity governance.
  • Partner with Security, Compliance, and Product teams to meet governance and regulatory requirements while mentoring engineers.

Kaseya is the leading provider of AI-powered IT management and cybersecurity software, serving Managed Service Providers (MSPs) and internal IT organizations worldwide. Backed by Insight Partners, Kaseya has experienced sustained double-digit growth, supports customers in over 20 countries, and manages over 15 million endpoints worldwide.

United States

  • Define architecture and technical direction for a large-scale IAM platform supporting authentication, authorization, and identity governance.
  • Lead design and implementation of secure, scalable identity systems including RBAC, ABAC, and multi-tenant architectures.
  • Partner with Security, Compliance, and Product teams to meet enterprise governance and regulatory requirements.

Jobgether uses AI-powered matching to connect candidates with hiring companies. They process applications and shortlist top candidates for partner companies, focusing on efficient and fair hiring.

US

  • You will administer and configure core IAM platforms and integrate applications using protocols like SAML, OAuth, OIDC, and SCIM.
  • You will define the identity strategy, architect enterprise-grade IAM toolsets, and build seamless operational processes.
  • You will collaborate with cross-functional teams to design SSO and MFA solutions and ensure a friction-free user experience.

We have been providing clean energy solutions throughout the U.S., Canada, and Mexico since 1987. We are a market-leading independent power producer and service provider with an innovative and collaborative team environment.

Latin America

  • Design and develop scalable IAM solutions, including identity provisioning and access management workflows.
  • Integrate corporate directories, cloud environments, and third-party applications with the core IAM platform.
  • Configure Single Sign-On (SSO), Multi-Factor Authentication (MFA), and federated identity protocols.

Nortal is a digital transformation company delivering complex solutions for global enterprises and public sector organizations. They have a close-knit remote team across Latin America and foster a culture of autonomy and open communication.

United States

  • Design and lead the architecture of CIAM and IAM solutions for customer, partner, and workforce identity use cases.
  • Define reference architectures and integration patterns using protocols like OAuth 2.0, OpenID Connect, SAML, and SCIM.
  • Drive integration across platforms such as Okta, Auth0, Microsoft Entra ID, AWS, and Salesforce to ensure secure and scalable identity experiences.

Jobgether uses AI-powered matching to connect candidates with job opportunities. It is a platform that evaluates applications and shares shortlists with hiring companies.

US Unlimited PTO

  • Configure end-to-end SAML 2.0 and OIDC SSO integrations and lead technical coordination with third-party vendors.
  • Set up SCIM 2.0 provisioning and implement group-based Role-Based Access Control (RBAC) within Okta.
  • Manage daily access operations, including provisioning/deprovisioning lifecycles and authoring CAB tickets for production changes.

EverOps is an Embedded Service Provider that partners with enterprise engineering and operations teams to solve complex delivery and service issues. They are a remote-first company that values ownership and collaboration.

$212,000–$237,000/yr
US Unlimited PTO

  • Build and improve core parts of Temporal Cloud's identity platform including authentication (OAuth 2.0/OIDC, SAML) and authorization (RBAC and policy-based access).
  • Integrate with enterprise identity providers (Okta, Entra ID, Google Workspace) and support user provisioning (SCIM) while addressing identity threats like token replay.
  • Write clear architecture and design docs, and contribute to the team's technical direction.

Temporal is an open source programming model that simplifies code and makes applications more reliable. We are a growing team of curious, driven, and collaborative individuals building the reliable foundation for every developer's toolbox.

US 12w maternity 12w paternity

  • Lead high-performing engineering teams in building identity security platforms (ITDR and ISPM) for millions of users globally.
  • Define technical vision, architecture, and engineering standards for scalable, identity-focused cybersecurity products.
  • Collaborate with product, security, and architecture teams to drive roadmap execution and deliver customer value.

Jobgether is an AI-powered job matching platform that connects candidates with hiring companies efficiently. As a partner company, we manage applications and next steps for this role, operating in a remote-first, high-growth environment focused on cybersecurity.

US

  • Administer Okta and Entra ID/AD, implementing SSO, MFA, and Conditional Access.
  • Design secure API authentication and automate identity lifecycle processes.
  • Operate privileged identity management and integrate identity telemetry into SIEM/XDR.

ARS-Rescue Rooter is a home services company that provides plumbing, heating, and cooling services. The company is an equal opportunity employer with thousands of employees and a focus on security and technology.

$154,700–$260,000/yr
US Canada

  • Design and evolve IAM foundations for AI Agents, including agent identity and permission guardrails.
  • Build authentication and authorization systems that are reliable, standards-based, and performant for millions of global users.
  • Partner with Infrastructure, Security, Compliance, and Product Engineering to solve complex cross-functional risk and governance challenges.

Samsara (NYSE: IOT) is the pioneer of the Connected Operations Cloud, enabling organizations to harness IoT data to improve safety, efficiency, and sustainability. As a recently public company with over 2.3 million connected devices, they foster a culture of growth mindset, inclusion, and long-term impact.

US 4w PTO

  • Architect and deliver a greenfield permission service from design doc to production, covering data model, policy evaluation, and enforcement APIs.
  • Define AuthN/AuthZ standards for 180+ product domains, including token strategy and access control patterns.
  • Drive architectural decisions and mentor engineers while partnering with product and security teams.

BambooHR builds a people intelligence platform that transforms HR and sets people free to do great work. The company is a proven market leader with a values-driven culture recognized by Inc and Salt Lake Tribune, offering flexibility and growth.

$190,800–$267,100/yr
United States Unlimited PTO

  • Build backend services for authentication, authorization, and identity to serve millions of daily users.
  • Mentor and coach fellow engineers while collaborating with cross-functional teams.
  • Drive high-leverage projects that improve system performance, scalability, and architecture.

Reddit is a community of communities built on shared interests, passion, and trust, hosting some of the most open conversations on the internet. With over 100,000 active communities and about 126 million daily active visitors, it is one of the largest sources of information online, fostering a flexible and remote-first culture.

$175,000–$210,000/yr
US

  • Lead enterprise authentication services across multiple Microsoft Entra ID tenants, ensuring secure and reliable access for workforce and partner applications.
  • Partner with cybersecurity, infrastructure, and application teams to design and implement MFA, SSO, and conditional access patterns with modern protocols.
  • Manage a team of direct reports and offshore staff, driving automation, vendor relationships, and operational metrics for authentication platforms.

NBCUniversal is a world-leading media and entertainment company, creating content across film, television, and streaming, and operating theme parks and consumer products. As a subsidiary of Comcast Corporation, they have a large global workforce and foster an inclusive culture with opportunities for community service and talent development.

India

  • Design, build, and maintain custom IAM applications, APIs, and automation that support identity lifecycle management and role-based access.
  • Partner with cybersecurity, infrastructure, and business stakeholders to translate IAM requirements into secure technical designs.
  • Engineer automated joiner, mover, leaver provisioning processes and ensure system integrations across enterprise platforms like Okta, Salesforce, and ServiceNow.

Shared Services provides identity and access management solutions for enterprise platforms. They operate in the information technology sector with a focus on secure integration patterns and operational reliability.

Europe 6w PTO

  • Define and own the technical architecture for the Identity squad’s authentication systems, including edge authentication redesign.
  • Lead the design and implementation of large-scale, multi-quarter initiatives spanning multiple services and teams.
  • Mentor and develop senior engineers, providing technical guidance and support for their professional growth.

Grafana Labs is the company behind the open observability cloud, providing a fully managed platform for monitoring and analyzing data. With over 1,600 team members across 40+ countries, we are a 100% remote company fostering a collaborative, open-source culture.

United States

  • Design, implement, and maintain PingFederate, PingAccess, and PingDirectory solutions in a regulated financial services environment.
  • Administer SSO, federation, and authentication services using SAML 2.0, OAuth 2.0, and OpenID Connect.
  • Collaborate with security, infrastructure, and application teams to integrate enterprise applications into the IAM ecosystem.

Jobgether uses AI-powered matching to connect candidates with job opportunities. The platform processes applications to identify top-fitting candidates and shares them with hiring companies.

Brazil

  • Design, configure, and maintain Okta policies, authentication flows, access controls, and token configurations for applications and APIs.
  • Integrate enterprise applications with Okta using secure authentication and authorization standards, and support migration of configurations between environments.
  • Troubleshoot and resolve authentication and identity-related issues, collaborating with application and infrastructure teams to implement secure solutions.

This posting is on behalf of a partner company that manages applications. The role is focused on designing and operating identity and access management solutions using Okta across distributed environments.

US

  • Lead, scale, and mentor a team of Technical Account Managers who act as trusted advisors for strategic Elite customers.
  • Define the technical account management roadmap and implement scalable processes to drive operational excellence.
  • Build strong executive relationships with CISOs and CIOs, translating technical milestones into business outcomes.

Ping Identity provides an intelligent cloud identity platform that enables secure and seamless digital experiences for users worldwide. The company serves more than half of the Fortune 100, has global offices, and fosters a culture that respects individuality and champions every identity.

Global

  • Own and manage the identity lifecycle and access governance program for employee, contractor, and non-human identities.
  • Administer the identity platform, including conditional access, SSO, and privileged identity management.
  • Provide end-user support and manage endpoint and SaaS application environments.

Dianthus Therapeutics is a biotechnology company developing therapies for severe autoimmune diseases. The company is growing quickly and building a culture centered on patient care and core principles.

Canada

  • Design and build platform services for authentication, authorization, and audit across ClickHouse Cloud.
  • Implement protocol-level support for SAML, SCIM, OIDC, OAuth2, and MFA/passwordless flows.
  • Partner with product teams to migrate auth implementations onto the shared platform and own production reliability.

ClickHouse is a leading real-time analytics and data warehousing company, recognized on the 2025 Forbes Cloud 100 list. With over 3,000 customers and rapid growth, including a $400M Series D funding round, the company serves AI innovators and global brands like Meta, Sony, and Tesla.