8 hours ago
Base Salary
$215k - $260k/yr
Responsibilities
- Own the multi-quarter architecture and technical direction for IAM, including authorization, authentication, federation, and identity lifecycle.
- Define platform-wide identity primitives, authorization patterns, and security guardrails.
- Evaluate and adopt core IAM technologies through build-versus-buy and framework decisions.
- Solve high-blast-radius problems involving authorization scalability, multi-tenancy, tenant isolation, security, reliability, and latency.
- Write and review code on critical distributed-system paths and maintain a high engineering quality bar.
- Drive cross-team technical alignment through design reviews, RFCs, and execution leadership without direct authority.
- Lead threat modeling and secure-by-design practices for systems on the critical request path.
- Mentor senior and mid-level engineers and influence hiring, onboarding, technical strategy, and engineering standards.
- Own production reliability practices, including SLOs, observability, incident response, and postmortems.
Requirements
- Bachelor’s degree in Computer Science or a related field, or equivalent practical experience.
- 8+ years of software engineering experience building production distributed systems in Go.
- Significant experience with identity, authorization, or other security-critical systems.
- Track record of leading the design and delivery of large-scale, fault-tolerant distributed systems and managed cloud services across multiple teams.
- Deep expertise in OIDC, OAuth2, SAML, JWT/token exchange, RBAC, ABAC, fine-grained and relationship-based authorization, identity federation, IdP integration, SCIM, identity lifecycle, and credential and secrets management.
- Experience with threat modeling at scale, production reliability for hot-path services, SLOs, deep observability, incident response, and postmortems.
- Enterprise security and compliance experience, including SOC 2; experience with FedRAMP or other regulated-environment frameworks is a bonus.
- Exceptional cross-functional communication and ability to explain complex technical trade-offs.
- Proven record of mentoring senior engineers, improving engineering standards, and influencing hiring and technical strategy.
- Bonus experience with OPA, Cedar, SpiceDB, OpenFGA, identity for AI agents, GPU or AI cloud infrastructure, or agentic workloads.
Benefits
- Competitive compensation and equity packages, including Restricted Stock Units.
- Paid time off, paid holidays, and leave of absence programs.
- Comprehensive health, dental, and vision insurance, plus employer HSA contributions.
- Paid parental leave, paid life insurance, and short- and long-term disability coverage.
- Professional development and tuition reimbursement.
- Mental health and wellness support.
- Commuter benefits for parking and transit, plus a cell phone stipend.
- 401(k) retirement plan with company match up to 4% of salary.
- Volunteer time off, global travel insurance, emergency assistance, daily meal allowance, and location-specific perks.
About Crusoe
Crusoe builds and operates GPU-powered data centers and an AI cloud platform for enterprises running large-scale AI training and inference. It vertically integrates energy supply with compute, using stranded and renewable power to reduce emissions and costs, and sells capacity via cloud services and managed infrastructure. Founded in 2018 and headquartered in Denver, the company is privately held.