Staff Software Engineer (Identity)

Location: Remote within the United States; listed locations are San Francisco, California, and Washington, United States.

Salary: $150,000–$275,000 per year, plus equity and bonus opportunities.

Company

hirify.global builds API and AI connectivity technologies, including the hirify.global Konnect platform for securing, managing, governing, and monetizing APIs and AI models.

What you will do

• Architect hirify.global Identity’s multi-tenant identity platform with organizational hierarchies, tenant isolation, delegated administration, and fine-grained permissions.
• Design token management capabilities including refresh token rotation, proof-of-possession tokens, token introspection, revocation, caching, and cross-region validation.
• Build claims engines, client management systems, custom grant flows, protocol extensions, plugin architecture, SDKs, webhooks, audit logging, and analytics dashboards.
• Develop enterprise federation and integration capabilities using SAML, external identity providers, LDAP/AD, SCIM, and custom protocol adapters.
• Implement rate limiting, anomaly detection, fraud prevention, threat modeling, and security controls for distributed attacks and token abuse.
• Lead technical initiatives involving compliance, observability, service mesh identity, workload identity, distributed tracing, metrics, and security event correlation.

Requirements

• 7+ years of experience building production identity platforms for identity providers or enterprise software companies, handling millions of authentication requests daily.
• Deep expertise in OAuth 2.0 extensions, OpenID Connect, OAuth 2.1, GNAP, JWT, PKCE, mTLS, token exchange, and JWT bearer assertions.
• Experience architecting multi-tenant platforms, global identity infrastructure, edge deployments, geo-distributed validation, caching, horizontal scaling, and latency optimization.
• Strong knowledge of cryptographic protocols, key rotation, HSM integration, privacy engineering, audit trails, data residency, and regulated identity systems.
• Experience with enterprise federation, LDAP/AD bridges, SCIM provisioning, developer-first APIs, SDKs, webhooks, extensibility, and custom protocol integrations.
• Ability to lead technical initiatives and mentor engineering teams on zero-trust architecture, workload identity, service mesh integration, security, and compliance.

Culture & Benefits

• Remote work arrangement for US-based employees.
• Equity and bonus opportunities may be available depending on role and applicable plans.
• US employees are typically offered healthcare benefits, a 401(k), disability benefits, life and AD&D insurance.
• Compensation and benefits vary by employee location, role, skills, and experience.