Staff Software Engineer (Identity and Authorization)

Location: Remote Canada

Company

hirify.global builds software for large AI-driven organizations to develop and operate data science and AI solutions at scale, including model development and MLOps capabilities.

What you will do

• Design the architectural direction for a centralized, fine-grained, relationship-based identity and authorization platform built on SpiceDB.
• Extend reusable authorization primitives across the platform and support user, group, and organizational access models for enterprise customers.
• Harden authorization services for production scale, reliability, and security, while planning migration away from legacy access checks without disrupting customers.
• Integrate cloud workload identity, starting with AWS IRSA and extending to Azure and GCP equivalents.
• Lead design reviews, clarify complex architectural decisions, improve engineering velocity, reduce technical debt, and guide teams building on the platform.
• Establish patterns for AI-assisted development while maintaining security, code quality, and engineering rigor.

Requirements

• Track record of evolving an enterprise-grade authorization system under real production traffic, with strong architectural judgment.
• Experience on a platform team supporting services across a larger engineering organization.
• Concrete experience helping build an authorization system that solved recurring customer challenges.
• History of improving team design quality, engineering velocity, and software quality.
• Hands-on experience with relationship-based or fine-grained authorization, including schema design for relations, permissions, and caveats, and understanding of tradeoffs versus traditional RBAC.
• Solid grounding in OIDC and SAML.
• Practical experience with cloud workload identity patterns such as AWS IRSA, Azure Workload Identity, or GCP Workload Identity Federation.
• Familiarity with credential management systems such as Vault.
• Strong Go, Java, or a comparable backend language; experience running services on Kubernetes; and API design skills for platforms used by other engineers.
• Experience architecting authentication and authorization frameworks that scale to enterprise customers.
• Considered, real-world experience using AI coding tools while maintaining code quality and security rigor.

Nice to have

• Experience designing a new authorization system and migrating to it from a legacy approach.
• Background at a company that builds authentication or authorization products.
• Experience with an identity provider such as Keycloak, Auth0, Okta, or ForgeRock.

Culture & Benefits

• Growth mindset with emphasis on creative problem-solving and continuous improvement.
• Environment focused on truthfulness, authenticity, teaching, and learning.
• Commitment to building a diverse team and encouraging applicants from all backgrounds.
• Remote work arrangement for candidates in Canada.