5 days ago
Base Salary
$215k - $260k/yr
Responsibilities
- Own the multi-quarter architecture and technical direction for IAM, including fine-grained authorization, authentication and federation, identity lifecycle, multi-tenancy, and tenant isolation.
- Define platform-wide identity primitives, authorization patterns, and security guardrails across the Crusoe Cloud platform.
- Evaluate and adopt core IAM technologies and make build-versus-buy and framework decisions.
- Write and review code for critical, high-scale authorization and identity paths while balancing security, reliability, and latency.
- Drive cross-team technical alignment through design reviews and RFCs and steer execution without direct authority.
- Lead threat modeling and secure-by-design practices for systems on the critical path of cloud requests.
- Own production reliability practices for hot-path services, including SLOs, observability, incident response, and postmortems.
- Mentor senior and mid-level engineers and influence hiring, onboarding, engineering standards, and technical strategy.
Requirements
- Bachelor's degree in Computer Science or a related field, or equivalent practical experience.
- 8+ years of software engineering experience building production distributed systems in Go.
- Significant experience with identity, authorization, or other security-critical systems and a track record of leading large-scale system design.
- Ability to set technical direction and deliver complex, fault-tolerant distributed systems and managed cloud services across multiple teams.
- Deep expertise in OIDC, OAuth2, SAML, JWT and token exchange, RBAC/ABAC, fine-grained and relationship-based authorization, identity federation, IdP integration, SCIM, identity lifecycle, credential and secrets management, and threat modeling.
- Experience owning production reliability for hot-path services, including SLOs, observability, incident response, and postmortems.
- Enterprise security and compliance experience, including SOC 2, and strong ability to communicate technical trade-offs across engineering, security, product, and leadership.
- Proven record of mentoring senior engineers, improving engineering standards, and influencing hiring and technical strategy.
- Preferred experience with policy-as-code and authorization engines such as OPA, Cedar, SpiceDB, or OpenFGA.
- Preferred experience with identity for AI agents, GPU or AI cloud infrastructure, and compliance frameworks such as FedRAMP or other regulated-environment frameworks.
Benefits
- Competitive compensation and equity packages, including Restricted Stock Units.
- Paid time off, paid holidays, and leave of absence programs.
- Comprehensive health, dental, and vision insurance, plus employer HSA contributions.
- Paid parental leave, paid life insurance, and short- and long-term disability coverage.
- Professional development and tuition reimbursement.
- Mental health and wellness support.
- Commuter benefits for parking and transit and a cell phone stipend.
- 401(k) retirement plan with company match up to 4% of salary.
- Volunteer time off, global travel insurance, emergency assistance, daily meals allowance, and location-specific perks.
About Crusoe
Crusoe builds and operates GPU-powered data centers and an AI cloud platform for enterprises running large-scale AI training and inference. It vertically integrates energy supply with compute, using stranded and renewable power to reduce emissions and costs, and sells capacity via cloud services and managed infrastructure. Founded in 2018 and headquartered in Denver, the company is privately held.