Staff Software Engineer, Identity and Authorization

Location: Remote Argentina

Company

hirify.global builds software for organizations developing and operating data science and AI solutions at scale, including model development, MLOps, collaboration, reuse, reproducibility, and compliance.

What you will do

• Set the architectural direction for a centralized, fine-grained, relationship-based identity and authorization platform built on SpiceDB.
• Design reusable authorization primitives, schemas, groups, organizational hierarchies, and interfaces for teams across the company.
• Harden authorization services for enterprise and public-sector scale, reliability, and security.
• Plan and execute migration from legacy access checks without disrupting customers.
• Expand cloud-native workload identity integrations, starting with AWS IRSA and extending to Azure and GCP equivalents.
• Lead design reviews, resolve technical ambiguity, reduce technical debt, and establish secure patterns for AI-assisted development.

Requirements

• Track record of evolving an enterprise-grade authorization system under real production traffic, with strong architectural judgment.
• Experience on a platform team supporting other services within a larger engineering organization.
• Concrete experience building an authorization system that solved recurring customer challenges.
• History of improving engineering designs, velocity, and quality across teams.
• Hands-on experience with relationship-based or fine-grained authorization, including schema design for relations, permissions, and caveats, and understanding of tradeoffs versus traditional RBAC.
• Solid grounding in OIDC and SAML.
• Practical experience with workload identity patterns such as AWS IRSA, Azure Workload Identity, or GCP Workload Identity Federation.
• Familiarity with a credential management system such as Vault.
• Strong Go, Java, or comparable-language backend engineering experience; comfort running services on Kubernetes; and API design experience for platforms used by other engineers.
• Experience architecting authentication and authorization frameworks that scale to enterprise customers.
• Considered, real-world experience using AI coding tools while maintaining code quality and security rigor.

Nice to have

• Experience designing a new authorization system and migrating to it from a legacy approach.
• Background at a company that builds authentication or authorization products.
• Experience with an identity provider such as Keycloak, Auth0, Okta, or ForgeRock.

Culture & Benefits

• Growth mindset focused on creative problem-solving and continuous improvement.
• Direct, truthful communication and an environment where employees can be themselves.
• Teaching and learning culture with tools and support for success.
• Commitment to building a diverse team and welcoming people of all backgrounds, genders, ethnicities, abilities, and sexual orientations.