Senior Software Engineer, Identity & Access Management
DigitalOcean6 months ago
Base Salary
$141k - $176k/yr
Responsibilities
- Design and develop high-availability, low-latency authentication and authorization services in Go for global-scale workloads.
- Build IAM foundations for cloud-native AI/ML platforms, including secure token exchange and identity-context injection for agentic workflows.
- Implement OIDC and SAML integrations for federated enterprise and partner Single Sign-On.
- Evolve the Policy Engine using Rego and Open Policy Agent standards to support resource-level permissions, dynamic scoping, and network-aware access conditions.
- Design and scale multi-tenant identity data models covering users, teams, organizations, and resource boundaries.
- Own service reliability by tuning Kubernetes deployments and migrating legacy data pipelines to modern eventing architectures.
- Identify and remediate security vulnerabilities involving credential stuffing, session hijacking, and configuration theft.
- Lead major technical workstreams, conduct deep code reviews, and mentor junior engineers.
Requirements
- 5+ years of software engineering experience, including at least 2+ years focused on Identity, Security Products, or high-scale Distributed Systems.
- Expert-level proficiency in Go and strong understanding of gRPC microservices architecture.
- Deep knowledge of OIDC, OAuth2, SAML, RBAC, ABAC, and PBAC.
- Experience building distributed systems involving consensus, replication, and partitioning at cloud scale.
- Working experience with Kubernetes, SQL, MySQL, and Terraform.
- Track record of simplifying complex legacy logic into maintainable abstractions.
- Ability to communicate technical strategy to senior leadership and collaborate across teams.
- Experience with Open Policy Agent and Rego is preferred.
- Familiarity with Kubernetes-based cloud-native deployment strategies is preferred.
Benefits
- Hybrid work arrangement.
- Reimbursement for relevant conferences, training, and education.
- Access to LinkedIn Learning's 10,000+ courses.
- Employee Assistance Program, local employee meetups, and flexible time off policy.
- Potential bonus and equity compensation, including equity grants upon hire and an Employee Stock Purchase Program.
About DigitalOcean
DigitalOcean provides cloud infrastructure and platform services for developers, startups, and small to mid-sized businesses, including virtual machines (Droplets), managed Kubernetes and databases, object/block storage, networking, and GPUs for AI workloads. It operates a usage-based, self-service public cloud with APIs, CLI, and a marketplace to deploy and scale applications. Founded in 2012 and headquartered in Broomfield, Colorado, DigitalOcean is a public company listed on the NYSE.