Senior Software Engineer (Identity)

TL;DR

Senior Software Engineer (Identity): Building core identity infrastructure for secure authentication, authorization, and identity governance across enterprise systems with an accent on implementing SSO/MFA and federated identity (SAML/OAuth/OIDC) plus access control models (ReBAC/ABAC/RBAC). Focus on designing scalable distributed systems and access-control evaluation while translating complex identity concepts for stakeholders.

Location: Not specified

Company

Scale AI develops reliable AI systems and the data/technology stack that powers leading LLMs and generative models.

What you will do

• Design and implement identity infrastructure for secure authentication and authorization across enterprise systems.
• Build authentication mechanisms including Single Sign-On (SSO), Multi-Factor Authentication (MFA), and federated identity (SAML, OAuth, OpenID Connect).
• Build authorization mechanisms including ReBAC, ABAC, and RBAC.
• Develop software-defined identity governance policies to support compliance with security policies and industry regulations (e.g., NIST, SOC2, ISO 27001).
• Share technical guidance with teams and stakeholders on identity management best practices.

Requirements

• 5+ years of full-time engineering experience, with specialization in infrastructure and identity systems.
• Infrastructure expertise including IAM controls and Infrastructure as Code (Terraform, Pulumi), plus microservice deployment best practices.
• Hands-on experience with authorization frameworks such as OpenFGA, Authzed, Cedar, Topaz, or similar solutions at scale.
• Strong understanding of Zanzibar-based ReBAC models, relationship tuples, and access control evaluation.
• Knowledge of authentication standards and formats: OAuth 2.0, OIDC, SAML, and JWT, plus IdP solutions such as EntraID and Okta.
• Experience with distributed systems and public cloud platforms (AWS preferred), with a track record of independent project ownership.

Culture & Benefits

• Work on identity engineering that supports large-scale AI data generation, evaluation, safety, and alignment.
• Inclusive and equal opportunity workplace with commitment to reasonable accommodations.
• Collaborative environment focused on communicating complex technical concepts to non-technical stakeholders.
• 90-day waiting period policy for reconsidering candidates for the same role.

Hiring process

• Application review and evaluation of fit for the role.
• Interviews to assess technical depth in identity/authz/authn and ability to communicate clearly.
• Final decision after completing the evaluation steps.