21 hours ago
Vancouver, CanadaStaff+
Responsibilities
- Design, build, and operate backend systems and APIs for authentication, authorization, identity context, and audit-related workflows.
- Lead cross-organizational engineering initiatives from technical design and implementation through rollout, measurement, and operational support.
- Improve login and access experiences across SSO, MFA, step-up authentication, delegated access, and enterprise identity flows.
- Build authorization systems supporting custom roles, resource-aware access control, and secure defaults.
- Create durable identity-aware audit trails and attribution for user, service, delegated, and agent-driven actions.
- Develop secure, reusable IAM integration patterns, tooling, and shared libraries for engineering teams.
- Mentor engineers and improve the reliability and maintainability of team systems.
Requirements
- Strong software engineering fundamentals and experience building reliable production backend systems.
- Experience leading complex projects and mentoring other engineers.
- Strong API design fundamentals and rigor around testing, code quality, and documentation.
- Understanding of IAM concepts including authentication, authorization, sessions, tokens, MFA, SSO, OAuth, SAML, OIDC, and RBAC.
- Clear communication, cross-team collaboration, and effectiveness in cross-functional technical discussions.
- Commitment to operational excellence, system reliability, toil reduction, and long-term service quality.
- Strong product and engineering judgment with the ability to balance security, usability, and developer experience.
- Bonus experience with production IAM, authentication, authorization, or audit systems.
- Bonus hands-on experience with Okta, Oso, SSO, SAML, OIDC, OAuth, or WebAuthn.
- Bonus experience building enterprise admin controls, authorization platforms, delegated access flows, audit trails, or shared platform infrastructure.
Benefits
- Hybrid Vancouver work arrangement with required in-office days on Monday, Wednesday, and Thursday.
- Up to four weeks per year of fully remote work.
- Equity and other forms of compensation may be provided depending on the position offered.
About Brex
Brex builds a spend management platform for businesses, combining corporate cards with expense management, bill pay, travel, and cash management software. It earns revenue from SaaS subscriptions and card interchange, and serves over 30,000 businesses including DoorDash and ServiceTitan. Founded in 2017 and headquartered in San Francisco, Brex LLC is a wholly owned subsidiary of Capital One, N.A.