Senior Software Engineer, Identity & Access
$430,000–$440,000 year
On-siteWarsaw, Mazovia, Poland
Job Summary
Own enterprise sign-on by delivering SSO across OIDC and SAML so customers onboard with their own identity provider. Build role-based access control with fine-grained, query-time enforcement across the product. Deliver SCIM provisioning and directory sync to keep user and group management aligned with the customer's directory. Construct token exchange, on-behalf-of flows, and service accounts to enable agents and services to act with scoped authority. Develop entitlements, session, and token management controls to maintain clean, auditable access at scale. This role requires 4+ years of backend experience with deep expertise in OIDC, OAuth2, SAML, and multi-tenant RBAC, using Python and modern frameworks like FastAPI. You will join a lean, high-impact team at StackAI, an Asana company, to build the foundational access layer enabling enterprise adoption of AI workflows.
Required Qualifications
- 4+ years building backend systems
- significant time spent on identity, authentication, or authorization
- Real depth in OIDC
- Real depth in OAuth2
- Real depth in SAML
- Real depth in token exchange
- Real depth in multi-tenant RBAC
- You've built or owned enterprise SSO
- You've built or owned identity systems
- strong grasp of identity-provider architecture
- strong grasp of enterprise auth patterns
- Strong in Python
- modern backend frameworks (FastAPI or similar)
Desired Qualifications
- SCIM and directory sync at scale
- Authorization frameworks and policy engines (OPA, Cedar, or Zanzibar-style systems)
- Entitlements, usage-based metering, or billing systems
- Multi-tenant SaaS at scale
- Startup or growth-stage experience
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.