Senior Staff Software Engineer
Remote · India
Job Summary
Senior Staff Software Engineer for the IAM Platform leads long-term architecture and roadmaps, drives identity, authentication, authorization, and access governance across multiple products; establishes standards and reference architectures; leads platform adoption and migration strategies. Hands-on engineering to design and operate core IAM services, build integrations with identity providers and SaaS products, support user lifecycle and machine identity management, implement secure token exchange and federated workflows, develop APIs and self-service capabilities, and resolve scalability, reliability, and security challenges. Emphasizes RBAC/ABAC, least privilege, auditability, and collaboration with security/compliance teams to meet regulatory requirements.
Required Qualifications
- 12+ years of software engineering experience building distributed systems, platform services, or security infrastructure
- Deep IAM expertise (authentication, authorization, federation, access governance)
- Hands-on experience with OAuth 2.0, OpenID Connect (OIDC), SAML, JWTs, MFA, enterprise SSO, delegated authorization patterns
- Experience implementing/integrating enterprise IAM platforms (Zitadel, Keycloak, Authentik, ForgeRock, Ping Identity, Okta, Auth0, or equivalent)
- Experience leveraging/open-source technologies for IAM platforms rather than building from scratch
- Understanding of multi-tenant SaaS architectures, tenant isolation, delegated administration, and B2B/B2B2B identity models
- Experience designing RBAC, ABAC, policy-based authorization, entitlement management, and access governance solutions
- Experience building/operating secure API platforms and service-to-service authentication
- Strong backend/cloud-native/infrastructure automation skills
- Experience designing highly available, scalable, secure distributed systems
- Proven track record leading large cross-functional initiatives while staying hands-on in architecture and implementation
- Preferred: experience with Zitadel or similar in production; enterprise identity provider integrations; policy engines (OPA/Cedar); machine identity lifecycle; secrets/certificate management; audit/compliance/governance systems; familiarity with SOC 2/ISO 27001/HIPAA/PCI-DSS/NIST/FedRAMP
Apply with one swipe on Sorce. We auto-fill applications and apply on your behalf — no cover letters, no 40-minute forms.
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.