Base Salary
$263k - $321k/yr
Responsibilities
- Define and evolve end-to-end identity architecture across authentication, authorization, session management, and token lifecycle.
- Establish trust boundaries, integration contracts, and secure platform primitives for identity consumers.
- Make build-versus-integrate decisions across vendor and in-house identity systems and own migration paths.
- Design repeatable self-service enterprise identity onboarding for SSO, SCIM provisioning, and multi-tenant trust.
- Architect federation and provisioning patterns for enterprise and nonprofit partnerships.
- Own consumer identity lifecycle capabilities including account continuity, progressive trust, confidence scoring, and anonymous-to-authenticated transitions.
- Build identity resolution capabilities such as visitor stitching, account linking, and confidence-weighted models for personalization and fraud prevention.
- Own the identity platform roadmap based on user impact, enterprise needs, compliance obligations, and technical feasibility.
- Set integration standards and publish platform APIs and SDKs for product engineering teams.
- Mentor Identity and Platform Tribe engineers and raise standards for system design, security, and operational rigor.
- Participate in on-call, lead incident response, and drive postmortem improvements to identity infrastructure.
- Communicate architecture decisions, tradeoffs, and roadmap progress to engineering, product, and cross-functional stakeholders.
Requirements
- 8+ years of software engineering experience, including significant time at senior, staff, or principal levels on platform or infrastructure systems.
- Deep hands-on expertise with OAuth 2.x, OpenID Connect, SAML 2.0, and SCIM.
- Experience designing and shipping production identity or authentication platforms used by other engineering teams.
- Experience with federation, session and token management, trust boundaries, and systems designed to minimize future change costs.
- Strong security expertise, including threat modeling, credential risk, and account takeover prevention.
- Proficiency in relational database design and identity data modeling, including schema evolution for high-availability environments.
- Ability to lead ambiguous projects through delivery while balancing technical and business context across organizational boundaries.
- Strong observability, monitoring, alerting, reliability, and incident response experience for mission-critical infrastructure.
- Preferred experience with Descope, Auth0, Okta, Ping, or comparable commercial identity platforms, including provider migrations.
- Preferred experience across enterprise and consumer identity, advanced authorization models such as RBAC, ABAC, and ReBAC, and policy engines such as OPA or Cedar.
- Preferred familiarity with SOC 2, PCI DSS, GDPR, CCPA, data residency, and deploying identity services on AWS, GCP, or Azure at scale.
- Contributions to identity standards bodies, open-source identity projects, or published IAM thought leadership are preferred.
Benefits
- Hybrid schedule requiring 3 days per week in the San Francisco office.
- Competitive pay and comprehensive healthcare, dental, vision, life insurance, and 401(k) benefits.
- Financial assistance for hybrid work and family planning, generous parental leave, flexible time off, and mental health and wellness resources.
- Learning, development, recognition, diversity and inclusion, employee resource group, and volunteering programs.
- Full-time position with equity and location-based pay differentials.
Tech Stack
About GoFundMe
There are a billion good intentions tucked inside each and every one of us. At GoFundMe, we believe that the impulse to help a person, fix a neighborhood, or change a nation should never be ignored. In fact, it should be shared with the entire world. That’s why we make it easy to inspire the world and turn your compassion into action. By giving people the tools they need to capture and share their story far and wide, we have built a community of more than 200 million donors and helped organizers raise over $15 billion for the causes important to them—and we are just getting started. Check out current job openings, join our team, and be a part of the change below. ## GoFundMe has assembled one of the best management teams in the business to build the next leading consumer Internet company, including leaders from LinkedIn, Groupon, and Google. We are also funded by some of Silicon Valley’s best venture capital firms, including Accel, Greylock, and TCV.