Staff Software Engineer (Identity & Access Management) - CyberCoders - Anywhere
CyberCoders
Staff Software Engineer, Identity & Access Management
Location: 100% Remote - However you must be west coast or Mountain Time Zone
Position Overview
We are seeking a Staff Software Engineer to lead design and delivery of robust, scalable Identity & Access Management (IAM) systems. This role owns core identity features single signon, SAML, OAuth 2.0, SCIM user provisioning, interservice authentication, and authorization mechanisms and partners with product, security, and infrastructure teams to secure and simplify how users and services authenticate and authorize across the platform. You will act as a technical leader, mentor engineers, and drive longterm architecture and operational excellence for IAM services.
Key Responsibilities
Design, implement, and operate production IAM services including single signon (SSO), SAML integrations, OAuth 2.0 authorization flows, and SCIM provisioning endpoints.Architect and build interservice authentication solutions (e.g., mTLS, service tokens, JWTs, token exchange) to secure servicetoservice communication at scale.Define and implement authorization mechanisms and policy models (RBAC, ABAC, policy evaluation, delegated authorization) to meet product and compliance requirements.Lead integrations with external identity providers and identity platforms (e.g., enterprise IdPs, Azure AD, Okta) and design robust provisioning and deprovisioning workflows.Drive secure design and cryptographic best practices across IAM services, including token handling, key management, session security, and secrets management.Collaborate with product, security, and infrastructure teams to translate requirements into a pragmatic and secure roadmap; balance shortterm delivery with longterm architectural improvements.Own operability: monitoring, alerting, capacity planning, SLOs, incident response, and postincident improvements for IAM services.Mentor and coach engineers on identity protocols, security principles, and scalable service design; run techn