Engineering Manager - IAM (Go)

Bestow • Dallas, TX

10d • Remote

About The Position

Bestow is a leading vertical technology platform serving some of the largest and most innovative life insurers. Our platform unifies the fragmented, legacy value chain, enabling carriers to launch products in weeks instead of years. Carriers choose us to scale and operate at unprecedented speed, powered by AI and automation. Bestow isn't selling policies. We're building the infrastructure that helps an entire industry move faster, reach more people, and deliver on its promise. Backed by leading investors (Goldman Sachs, Hedosophia, NEA, Valar, 8VC) and trusted by major carriers, Bestow is powered by a team that moves with precision, purpose, and heart. If you want to help reimagine a centuries-old industry with lasting impact, join us. Bestow offers flexible remote/hybrid work, meaningful benefits, equity, and substantial growth opportunities. Bestow uses E-Verify to confirm the employment eligibility of all newly hired employees. The Engineering team is responsible for all technology for Bestow and the Bestow Platform. We serve employees, consumers, and enterprise customers. In addition to building software, we integrate and manage many third-party products used by employees and as part of the platform. Our major functional teams are product engineering, infrastructure, IT, data & analytics, and program management. Engineering works closely with product management and design to define and prioritize the product roadmap.

Requirements

• 8+ years of professional software experience, including 1+ years directly managing a team of Software Engineers while staying hands-on in the code.
• Bachelor's degree or equivalent experience.
• Professional experience with Go, or another statically typed backend language with a clear path to Go.
• Production experience with cloud infrastructure and Kubernetes or a comparable container orchestration platform.
• Experience with PostgreSQL or another relational database, comfortable writing ANSI SQL.
• Experience designing modern distributed systems and APIs, including Docker for local development and tools such as Protocol Buffers, OpenAPI, or Swagger.
• Lead with an end-to-end ownership mentality, combining high organizational standards with excellent communication to build, retain, and empower high-performing engineering teams.
• Deep understanding of the full software development lifecycle, from feature inception through system maintenance, continuous integration, and release strategy.
• Hands-on experience using agentic coding tools on a production codebase. Claude Code is the standard at Bestow and direct experience with it is preferred; comparable experience with tools like Cursor or GitHub Copilot transfers well.
• Track key metrics and consistently meet established Service Level Agreements.
• Break down ambiguous technical problems and identify areas of risk early.
• Able to pick up and ship work in the team's codebases when the team needs it.

Nice To Haves

• Identity provider depth: hands-on experience with Auth0, Okta, or a similar platform, including tenant and organization configuration, connection management, and custom logic such as Rules or Actions.
• OAuth 2.0 and OIDC: working knowledge of OAuth flows, OpenID Connect, token types, JWT validation, and token lifecycle concerns like caching, rotation, and revocation.
• Multi-tenant architecture: designing authentication systems with tenant isolation, partner-specific branding, SSO configuration, and audit logging that holds up in a regulated industry.
• Authorization patterns: RBAC, ABAC, or policy-based access control, and experience separating authentication from authorization.
• Enterprise SSO and provisioning: integrating SAML 2.0 and OIDC connections for B2B partnerships, and SCIM for automated provisioning.

Responsibilities

• Lead a team of Software Engineers building the identity and access management foundation behind our digital life insurance enrollment experience.
• Spend roughly 20% of your time writing production code.
• Lead the team, shape architecture, and partner with Product Managers, Designers, and our enterprise partners.
• Share responsibility for operating workloads running on Kubernetes in Google Cloud Platform, composed of several microservices written in Go that integrate using gRPC, REST, and async messaging patterns.
• Lead the evolution of our authorization model to support multi-tenant enterprise customers at scale.
• Architect the separation of authentication and authorization so each can scale, cache, and enforce policy independently across enterprise partnerships.
• Design a token strategy that balances security, partner flexibility, and platform cost, and manage the vendor relationships that go with it.
• Build automated user provisioning and de-provisioning so partner onboarding does not require engineering work.
• Solve for partner-specific requirements such as biometric re-authentication, extended session lifetimes, layered access policies, and regulatory audit needs.
• Take a regular turn in the weekly on-call rotation covering authentication and authorization services.
• Own the observability, monitoring, and alerting for your services, track uptime and incident metrics, and lead incident response when it is your team's service.
• Recruit, interview, and hire engineers for your team, and partner closely with Talent Acquisition on pipeline and calibration.
• Own the onboarding experience for new engineers, including current documentation and thoughtful 30, 60, and 90 day plans.
• Hold regular 1:1s focused on growth, and build individual development plans tied to what each engineer actually wants from their career.
• Coach engineers on both technical and professional skills, and find them stretch assignments that move them forward.
• Build an inclusive team where people trust each other enough to disagree productively, and address team conflict directly when it comes up.
• Set clear, measurable expectations, give documented and actionable feedback, and run fair performance reviews with unambiguous outcomes.
• Address underperformance with both empathy and urgency, and raise it early rather than late.
• Translate product requirements into technical plans, estimate your team's capacity and timelines honestly, and deliver against those estimates.
• Own a realistic team roadmap and make the daily prioritization calls that keep it real.
• Track your team's delivery metrics, report on them in the monthly operating review, and come with a plan when something dips.
• Set a technical north star for IAM that your team can make decisions against, and execute toward it incrementally rather than in one big bet.
• Translate company strategy into team-level work through RFCs, PRD input, and well-scoped tickets.
• Communicate status, progress, and risk to stakeholders early and transparently, and escalate with a proposed solution attached.
• Explain technical concepts clearly to non-technical audiences, including senior leadership and external partners.
• Connect your team's work to business outcomes and make cost and benefit trade-offs explicit.
• Model effective use of AI coding tools and set the standard for how agent generated changes get reviewed, tested, and attributed.
• Level up your team's AI practice through hands-on workshops, shared prompting patterns, and continuous iteration on the team's approach.
• Ensure the team follows security and quality best practices for AI tool usage.
• Create room for experimentation and calculated risk, and treat failed experiments as learning the team talks about openly.

Benefits

• Competitive salary and equity based on role
• Policies and managers that support work/life balance, like our flexible paid time off and parental leave programs
• 100% paid-premium option for medical, dental, and vision insurance
• Lifestyle stipend to support your physical, emotional, and financial wellbeing
• Flexible work-from-home policy and open to remote
• Remote and WFH options, as well as a beautiful, state-of-the-art office in Dallas’ Deep Ellum, for those who prefer an office setting
• Employee-led diversity, equity, and inclusion initiatives

What This Job Offers

• Job Type: Full-time
• Career Level: Manager
• Education Level: Associate degree