5 months ago
Base Salary
$263k - $321k/yr
Responsibilities
- Define and evolve end-to-end identity architecture across authentication, authorization, session management, and token lifecycle.
- Establish trust boundaries, integration contracts, and secure platform primitives for identity consumers.
- Make build-versus-integrate decisions across vendor and in-house identity systems and own migration paths.
- Design repeatable self-service enterprise identity onboarding for SSO, SCIM provisioning, and multi-tenant trust.
- Architect federation and provisioning patterns for enterprise and nonprofit partnerships.
- Own consumer identity lifecycle capabilities including account continuity, progressive trust, confidence scoring, and anonymous-to-authenticated transitions.
- Build identity resolution capabilities such as visitor stitching, account linking, and confidence-weighted models for personalization and fraud prevention.
- Own the identity platform roadmap based on user impact, enterprise needs, compliance obligations, and technical feasibility.
- Set integration standards and publish platform APIs and SDKs for product engineering teams.
- Mentor Identity and Platform Tribe engineers and raise standards for system design, security, and operational rigor.
- Participate in on-call, lead incident response, and drive postmortem improvements to identity infrastructure.
- Communicate architecture decisions, tradeoffs, and roadmap progress to engineering, product, and cross-functional stakeholders.
Requirements
- 8+ years of software engineering experience, including significant time at senior, staff, or principal levels on platform or infrastructure systems.
- Deep hands-on expertise with OAuth 2.x, OpenID Connect, SAML 2.0, and SCIM.
- Experience designing and shipping production identity or authentication platforms used by other engineering teams.
- Experience with federation, session and token management, trust boundaries, and systems designed to minimize future change costs.
- Strong security expertise, including threat modeling, credential risk, and account takeover prevention.
- Proficiency in relational database design and identity data modeling, including schema evolution for high-availability environments.
- Ability to lead ambiguous projects through delivery while balancing technical and business context across organizational boundaries.
- Strong observability, monitoring, alerting, reliability, and incident response experience for mission-critical infrastructure.
- Preferred experience with Descope, Auth0, Okta, Ping, or comparable commercial identity platforms, including provider migrations.
- Preferred experience across enterprise and consumer identity, advanced authorization models such as RBAC, ABAC, and ReBAC, and policy engines such as OPA or Cedar.
- Preferred familiarity with SOC 2, PCI DSS, GDPR, CCPA, data residency, and deploying identity services on AWS, GCP, or Azure at scale.
- Contributions to identity standards bodies, open-source identity projects, or published IAM thought leadership are preferred.
Benefits
- Hybrid schedule requiring 3 days per week in the San Francisco office.
- Competitive pay and comprehensive healthcare, dental, vision, life insurance, and 401(k) benefits.
- Financial assistance for hybrid work and family planning, generous parental leave, flexible time off, and mental health and wellness resources.
- Learning, development, recognition, diversity and inclusion, employee resource group, and volunteering programs.
- Full-time position with equity and location-based pay differentials.
Tech Stack
About GoFundMe
GoFundMe builds a crowdfunding platform for individuals and nonprofits to raise money for personal needs, community projects, and charitable causes. The company generates revenue primarily through optional donor tips and payment processing fees, and also supports nonprofit fundraising through its Classy subsidiary. Founded in 2010 and headquartered in Redwood City, California, the platform’s community has raised more than $40 billion.