10 hours ago
Base Salary
$192k - $240k/yr
Responsibilities
- Design, build, and operate backend systems and APIs for authentication, authorization, identity context, and audit-related workflows.
- Lead engineering initiatives end to end, including technical design, implementation, rollout, measurement, and operational support.
- Improve login and access experiences across SSO, MFA, step-up authentication, delegated access, and enterprise identity flows.
- Build authorization systems supporting custom roles, resource-aware access control, and secure defaults.
- Create durable identity-aware audit trails and attribution for user, service, delegated, and agent-driven actions.
- Develop secure-by-default IAM integrations, patterns, tooling, and shared libraries for other engineering teams.
- Mentor engineers and improve reliability, maintainability, and operational quality across the team’s systems.
Requirements
- 7+ years of professional experience designing, developing, and deploying applications.
- Strong software engineering fundamentals and experience building reliable production backend systems.
- Experience leading complex projects and mentoring other engineers.
- Strong API design fundamentals and rigor around testing, code quality, and documentation.
- Understanding of IAM concepts including authentication, authorization, sessions, tokens, MFA, SSO, OAuth, SAML, OIDC, and RBAC.
- Clear communication and effective cross-functional technical collaboration skills.
- Experience improving system reliability, reducing toil, and maintaining high-quality services over time.
- Strong product and engineering judgment with the ability to balance security, usability, and developer experience.
- Preferred experience with IAM, authentication, authorization, or audit systems in production environments.
- Preferred hands-on experience with Okta, Oso, SSO, SAML, OIDC, OAuth, passkeys, or WebAuthn.
- Preferred experience building enterprise-facing admin controls, custom roles, delegated access flows, or audit trails.
- Preferred experience working on platform teams providing shared infrastructure, paved roads, or secure-by-default frameworks.
Benefits
- Hybrid Seattle role requiring in-office work Monday, Wednesday, and Thursday.
- Up to four weeks per year of fully remote work.
- Equity and other forms of compensation may be provided as part of the total compensation package.
About Brex
Brex builds a spend management platform for businesses, combining corporate cards with expense management, bill pay, travel, and cash management software. It earns revenue from SaaS subscriptions and card interchange, and serves over 30,000 businesses including DoorDash and ServiceTitan. Founded in 2017 and headquartered in San Francisco, Brex LLC is a wholly owned subsidiary of Capital One, N.A.