10 hours ago
Base Salary
$192k - $240k/yr
Responsibilities
- Design, build, and operate backend systems and APIs for authentication, authorization, identity context, and audit-related workflows.
- Lead engineering initiatives end to end, including technical design, implementation, rollout, measurement, and operational support.
- Improve login and access experiences across SSO, MFA, step-up authentication, delegated access, and enterprise identity flows.
- Build authorization systems supporting custom roles, resource-aware access control, and secure defaults.
- Create durable identity-aware audit trails and attribution for user, service, delegated, and agent-driven actions.
- Partner with engineers across Brex to make IAM integrations secure by default and easier to adopt through patterns, tooling, and shared libraries.
- Mentor engineers and improve the reliability and maintainability of team systems.
Requirements
- 7+ years of professional experience designing, developing, and deploying applications.
- Strong software engineering fundamentals and experience building reliable production backend systems.
- Experience leading complex projects and mentoring other engineers.
- Strong API design fundamentals, with rigor around testing, code quality, and documentation.
- Understanding of IAM concepts including authentication, authorization, sessions, tokens, MFA, SSO, OAuth, SAML, OIDC, and RBAC.
- Clear communication and effective cross-functional collaboration.
- Operational excellence skills, including improving reliability and reducing toil.
- Strong product and engineering judgment balancing security, usability, and developer experience.
- Bonus experience with IAM, authentication, authorization, or audit systems in production.
- Bonus hands-on experience with Okta, Oso, SSO, SAML, OIDC, OAuth, passkeys, or WebAuthn.
- Bonus experience building enterprise admin controls, custom roles, delegated access flows, or audit trails.
- Bonus experience on platform teams providing shared infrastructure, paved roads, or secure-by-default frameworks.
Benefits
- Hybrid work based in the San Francisco office, with Monday, Wednesday, and Thursday designated as in-office days.
- Up to four weeks per year of fully remote work.
- Equity and other forms of compensation may be provided as part of the total compensation package.
About Brex
Brex builds a spend management platform for businesses, combining corporate cards with expense management, bill pay, travel, and cash management software. It earns revenue from SaaS subscriptions and card interchange, and serves over 30,000 businesses including DoorDash and ServiceTitan. Founded in 2017 and headquartered in San Francisco, Brex LLC is a wholly owned subsidiary of Capital One, N.A.