Senior Staff Software Engineer (Identity & Access Management)

Location: San Francisco Bay Area, United States; in-office three times per week

Annual salary: $233,500–$321,200 USD, with location-based differentials and additional equity and benefits.

Company

hirify.global operates a community fundraising platform connecting donors, beneficiaries, nonprofit partners, and charitable institutions.

What you will do

• Define and evolve IAM architecture across authentication, authorization, session management, token lifecycle, and policy enforcement.
• Build a scalable enterprise identity onboarding experience with self-service SSO, SCIM provisioning, and multi-tenant trust patterns.
• Architect federation and provisioning integrations using OIDC, SAML 2.0, and SCIM across varied enterprise identity providers.
• Design MFA orchestration, step-up authentication, consumer identity, passwordless authentication, and social login flows.
• Establish policy enforcement architecture and authorization contracts for consumer and enterprise products.
• Own the IAM roadmap, partner with security and platform stakeholders, and mentor engineers across the Identity team.

Requirements

• 8+ years of software engineering experience, including significant work at senior, staff, or principal level on platform or infrastructure systems.
• Deep hands-on expertise with OAuth 2.x, OpenID Connect, SAML 2.0, and SCIM.
• Production experience designing and operating IAM or authentication platforms at meaningful scale.
• Experience with enterprise identity, including SSO, SCIM provisioning, multi-tenant trust, heterogeneous IdPs, and B2B platforms.
• Strong security, threat modeling, credential risk, account takeover, observability, reliability, and incident response skills.
• Must be located in the San Francisco Bay Area and able to work in the office three days per week.

Nice to have

• Production experience with Descope, Auth0, Okta, Ping, or comparable identity platforms, including provider migrations.
• Experience across enterprise and consumer identity, especially in fintech, SaaS, payments, or identity-focused companies.
• Knowledge of RBAC, ABAC, ReBAC, OPA, Cedar, compliance requirements, data residency, and cloud infrastructure.
• Contributions to identity standards, open-source identity projects, or IAM thought leadership.

Culture & Benefits

• Mission-driven work supporting millions of people and charitable organizations.
• Competitive pay, equity, healthcare, dental, vision, life insurance, and a 401(k) savings program.
• Hybrid-work financial assistance, flexible time off, generous parental leave, and mental health and wellness resources.
• Learning, development, recognition, volunteering, diversity and inclusion initiatives, and employee resource groups.