Senior Software Engineer, Identity & Access Management
DigitalOcean6 months ago
Base Salary
$141k - $176k/yr
Responsibilities
- Design and develop highly available, low-latency authentication and authorization services in Go for global-scale traffic.
- Build secure token exchange and identity-context injection foundations for AI/ML and agentic workflows.
- Implement OIDC and SAML integrations for federated enterprise and partner SSO.
- Evolve the Rego/OPA-based Policy Engine with resource-level permissions, dynamic scoping, and network-aware access conditions.
- Design and scale multi-tenant identity data models for users, teams, organizations, and resource boundaries.
- Own service reliability, including Kubernetes deployment tuning and migration of legacy data pipelines to modern eventing architectures.
- Identify and remediate security vulnerabilities involving credential stuffing, session hijacking, and configuration theft.
- Lead major technical workstreams, conduct deep code reviews, and mentor junior engineers.
Requirements
- 5+ years of software engineering experience, including at least 2+ years focused on Identity, Security Products, or high-scale Distributed Systems.
- Expert-level proficiency in Go and strong understanding of gRPC microservices architecture.
- Deep knowledge of OIDC, OAuth2, SAML, RBAC, ABAC, and PBAC.
- Proven ability to build distributed systems supporting consensus, replication, and partitioning at cloud scale.
- Working experience with Kubernetes, MySQL, and Terraform.
- Track record of simplifying complex legacy logic into maintainable abstractions.
- Ability to communicate technical strategy to senior leadership and collaborate across teams.
- Experience with Open Policy Agent and Rego is preferred.
- Familiarity with canary and blue-green cloud-native deployment strategies via Kubernetes is preferred.
Benefits
- Remote work arrangement.
- Reimbursement for relevant conferences, training, and education.
- Access to LinkedIn Learning courses.
- Employee Assistance Program.
- Local employee meetups.
- Flexible time off policy.
- Bonus eligibility and equity compensation, including equity grants and an Employee Stock Purchase Program.
Tech Stack
About DigitalOcean
DigitalOcean provides cloud infrastructure and platform services for developers, startups, and small to mid-sized businesses, including virtual machines (Droplets), managed Kubernetes and databases, object/block storage, networking, and GPUs for AI workloads. It operates a usage-based, self-service public cloud with APIs, CLI, and a marketplace to deploy and scale applications. Founded in 2012 and headquartered in Broomfield, Colorado, DigitalOcean is a public company listed on the NYSE.