2 months ago
Base Salary
$150k - $275k/yr
Responsibilities
- Design and implement token management systems with refresh token rotation, proof-of-possession tokens, introspection, and real-time revocation.
- Lead development of an extensible claims engine supporting dynamic attributes, contextual claims, and business logic at token issuance.
- Architect global identity infrastructure with edge optimization, token caching, cross-region replication, and low-latency authentication.
- Build rate limiting, anomaly detection, fraud prevention, identity federation, protocol adapters, and enterprise client management capabilities.
- Lead developer experience initiatives involving SDKs, webhooks, audit logging, analytics dashboards, plugin architecture, and extensible APIs.
- Drive compliance, data residency, privacy, observability, and security event correlation initiatives for Kong Identity.
- Mentor engineering teams on zero-trust architecture, workload identity, service mesh integration, and advanced identity concepts.
Requirements
- 7+ years of experience building production identity platforms at identity providers or enterprise software companies, including systems handling millions of authentication requests daily.
- Deep expertise in OAuth 2.0 extensions including PKCE, mTLS, JWT bearer assertions, and token exchange, as well as OpenID Connect, OAuth 2.1, and GNAP.
- Experience architecting multi-tenant identity platforms with tenant isolation, tenant-specific configuration, enterprise features, delegated administration, and fine-grained permissions.
- Strong knowledge of cryptographic protocols, JWT patterns, key rotation, HSM integration, and post-quantum cryptography considerations.
- Experience with enterprise identity integrations including SAML federation, LDAP/AD bridges, SCIM provisioning, external identity providers, and custom protocol adapters.
- Experience building identity platforms with analytics, monitoring, security event detection, threat modeling, penetration testing coordination, and attack prevention.
- Experience with global infrastructure, edge deployment, geo-distributed token validation, cross-region consistency, horizontal scaling, caching, and latency optimization.
- Experience building developer-focused identity platforms with SDKs, webhooks, extensible APIs, custom grant flows, and protocol extensions.
- Knowledge of compliance requirements, audit trail design, data residency controls, privacy engineering, service mesh identity, workload identity bootstrapping, and container orchestration integration.
- Proven ability to lead technical initiatives and mentor teams in complex, regulated environments.
Categories
About Kong
Kong builds an open-source and commercial platform for API and AI connectivity, including Kong Gateway, Kong Konnect, and service mesh tools (Kuma/Kong Mesh) to secure, manage, and observe APIs and LLM traffic across clouds. It sells subscriptions and cloud services for API lifecycle management, security, and traffic governance to enterprises and platform teams. Founded in 2017 and headquartered in San Francisco, Kong is privately held.