Build and improve core parts of Temporal Cloud's identity platform: authentication (OAuth 2.0/OIDC, SAML), authorization (RBAC and policy-based access), and workload identity.
Keep the auth path fast and reliable through caching, token handling, and revocation strategies.
Integrate with enterprise identity providers (Okta, Entra ID, Google Workspace) and support SCIM provisioning.

Requirements:

Solid experience building and operating production identity systems: OAuth 2.0/OIDC, SAML, JWT, token/key rotation.
Understanding of authorization models (RBAC, ABAC); familiarity with OPA, Cedar, or OpenFGA is a plus.
Proficiency in Go; experience with Python, Java, or Rust is a plus.

Compensation & Benefits:

Base salary range: $212,000 to $237,000, plus equity options.
Unlimited PTO, 12 holidays + 2 floating holidays, 100% premium coverage for medical, dental, vision.
Additional perks: learning & development, lifestyle spending, in-home office setup, internet stipend, and more.

Temporal

Temporal is an open source programming model that simplifies code and makes applications more reliable. We are a growing team of curious, driven, and collaborative individuals building the reliable foundation for every developer's toolbox.

Apply for This Position