Principal Engineer – Authentication & Authorization (Hybrid)
CrowdStrike2 days ago
Base Salary
$195k - $290k/yr
Responsibilities
- Own and drive the technical strategy and roadmap for the Authentication Platform.
- Architect multi-tenant identity infrastructure supporting MSSP models, hierarchical tenancy, delegated administration, cross-tenant access, and fine-grained access controls.
- Design and scale authentication and authorization systems handling millions of AuthN and trillions of AuthZ decisions with ultra-low latency and 99.999% availability.
- Lead cross-region authentication and authorization architecture with secure, consistent, and performant identity operations.
- Drive next-generation authentication initiatives including passwordless authentication, continuous authentication, device trust, and AI-driven adaptive access controls.
- Define standards for OAuth 2.0, OIDC, SAML, FIDO2/WebAuthn, token lifecycle management, ABAC, ReBAC, RBAC, and policy engines.
- Mentor senior engineers and influence Product, Security, and Engineering teams across the organization.
Requirements
- 15+ years of software engineering experience, including 6+ years in identity and authentication systems.
- Deep expertise in multi-tenant SaaS architecture, including MSSP or hierarchical tenancy models and fine-grained access controls at scale.
- Proven experience building and operating high-volume authentication and authorization systems with ultra-low latency and 99.999% availability.
- Experience designing cross-region identity and authorization architectures with strong consistency and failover guarantees.
- Experience with internal service-to-service and machine identity systems as well as external user-facing authentication and authorization systems at hyperscale.
- Experience with passwordless authentication, device trust, continuous verification, and AI-driven access policies.
- Strong knowledge of ABAC, ReBAC, RBAC, and policy engines such as OPA and Cedar.
- Proficiency in Go, Python, or Java.
- Experience with AWS, GCP, or Azure and Kubernetes.
- Ability to own technical strategy, influence across organizations, and communicate with technical and executive audiences.
- Experience utilizing AI technologies to improve decision-making, workflows, efficiency, and business outcomes.
- Bonus: experience with Google Zanzibar-style authorization systems or cybersecurity SaaS and MSSP platform products.
Benefits
- Hybrid work arrangement requiring 2–3 days per week on-site at a posted location.
- Base salary range of $195,000–$290,000 per year, with eligibility for bonuses and equity grants.
- Comprehensive physical and mental wellness programs.
- Competitive vacation and holidays, plus paid parental and adoption leave.
- Professional development opportunities, employee networks, volunteer opportunities, and office amenities.
- Health insurance, 401k, and paid time off.
Categories
About CrowdStrike
CrowdStrike builds the Falcon cloud-native security platform used by enterprises and governments to protect endpoints, cloud workloads, identities, and data with EDR, next-generation antivirus, threat intelligence, and managed threat hunting. Founded in 2011 and publicly traded on NASDAQ as CRWD, the company sells primarily by subscription and also provides incident response services; its systems ingest and analyze nearly 3 trillion security events per day across customer environments.