Member of Technical Staff (Software Engineer, Enterprise Trust & Governance)

Perplexity • Toronto, ON

3d • $220,000 - $405,000

About The Position

The Enterprise Trust & Governance team builds the control plane that enables large organizations to deploy Perplexity broadly and confidently. The team makes administrative controls precise, enforceable, reliable, consistent across products, and transparent to the people responsible for them.

This product and platform engineering role carries end-to-end ownership, from shaping architecture and policy models to shipping experiences used by customer administrators and security teams. The role works across product and infrastructure teams to turn complex enterprise requirements into reusable platform capabilities and intuitive controls. Areas of scope include identity and provisioning, fine-grained role-based access across connectors, tool actions, and models, customer-managed encryption keys, admin APIs, audit logs, and policy and usage controls. These governance capabilities help enterprises move from pilots to company-wide deployments and build confidence in entrusting agents with greater responsibility.

Requirements

• At least 4 years of software engineering experience, with a track record of owning complex backend systems from design through production operation.
• Strong system design skills, including building reliable, scalable, multi-tenant SaaS platforms with clear security and isolation boundaries.
• Strong proficiency in a backend language such as Python, Go, or Rust.
• Hands-on experience with cloud infrastructure such as AWS and Kubernetes.
• Deep expertise in at least one of the following: enterprise identity and provisioning, including OAuth, OIDC, SAML, and SCIM; permissions platforms, fine-grained authorization, and policy enforcement; encryption, customer-managed keys, and key lifecycle management; or enterprise admin platforms, audit infrastructure, or usage and spend analytics.
• Experience building or integrating enterprise identity and access systems, including platforms such as WorkOS, Okta, or Microsoft Entra ID.
• Sound technical judgment in security-sensitive systems, balancing threat models, authorization correctness, and failure behavior with usability and delivery speed.
• A track record of leading ambiguous, cross-team initiatives from architecture through adoption, setting technical direction for shared platforms, and raising engineering quality through mentorship.

Responsibilities

• Own enterprise identity and provisioning, including SSO (SAML/OIDC), SCIM, WorkOS integrations, and support for identity providers such as Okta and Microsoft Entra ID.
• Build a permissions platform with fine-grained roles and permissions for connectors, tool actions, models, and model effort levels, consistently enforced across products and agent workflows.
• Design and ship secure, well-documented admin APIs for audit logs, members, groups, roles, and settings.
• Build policy controls for model and feature availability, staged rollouts, model deprecations, usage and spend limits, alerts, and cost-center allocation.
• Build admin-facing analytics for adoption, usage, spend, and policy enforcement to help organizations measure value and manage deployments.
• Deliver audit logs and change notifications to help administrators investigate activity, track configuration changes, and support compliance.
• Set the technical bar for authorization correctness and reliability, including fast, consistent, explainable permission checks, well-defined failure behavior, and strong tenant isolation.
• Partner with Product, Design, Security, Sales, and Customer Success to translate complex enterprise requirements into reusable platform capabilities and intuitive admin experiences.
• Lead ambiguous, cross-team initiatives from architecture through adoption, set technical direction for shared platforms, and raise engineering quality through mentorship.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed