Senior Backend Engineer - Identity & Access Management

onX • Bozeman, MT

3d • Hybrid

About The Position

onX is seeking a Senior Backend Engineer with a passion for building scalable platform Identity and Access Management (IAM) systems. Your focus will be on designing, developing, and scaling secure authentication, authorization, and user management services that are foundational to our platform. You will play a key role in evolving our IAM platform and delivering seamless cross-platform authentication across iOS, Android, and web. You will be part of our Core Services team that enables product teams to build faster and more securely by providing core infrastructure, services, and patterns. This is a great opportunity to help shape the future of how users securely access and interact with onX's suite of outdoor technology products. This position reports to the Director of Engineering, Core Services.

Requirements

• B.S., M.S., or equivalent experience in computer science or a related field
• Eight or more years of professional software development experience, with API development as a primary focus for at least three of those years
• Strong Go/Golang backend development experience with RESTful API design
• Experience building and debugging distributed, scalable, highly available microservices architecture
• Solid understanding of identity systems: OAuth 2.0, session management, bearer token authentication, SSO integrations
• Experience with distributed databases (CockroachDB or similar PostgreSQL-compatible distributed systems) and relational databases (PostgreSQL, MySQL)
• Excellence in designing and developing modern APIs and scalable systems that ensure reliability and extensibility
• Familiarity with Docker, Kubernetes, and infrastructure-as-code technologies such as Terraform
• Strong computer science foundation
• Security-first mindset -- you think about threat models, secure defaults, and defense in depth as part of your design process
• You evaluate technologies and solutions based on merit, stability, performance, and the ability to debug
• Ability to write maintainable, well-tested code that's easy for others to understand
• A strong sense of ownership of your work
• Advocacy for customers -- both internal colleagues and end users -- and their experience
• Permanent US work authorization is a condition of employment with onX

Nice To Haves

• Experience with identity platforms such as Ory Kratos, Auth0, Cognito, or similar
• Experience with the Ory Stack, especially Hydra, Kratos, and Oathkeeper
• Experience with Authzed SpiceDB, Google Zanzibar, or AWS Cedar for fine-grained authorization
• Understanding of mobile authentication patterns: WebView vs. browser auth tradeoffs, token-based flows across iOS/Android/web
• Reliability engineering experience: SLI/SLO implementation, incident response, performance optimization
• SOC2 compliance experience or familiarity with security audit frameworks
• Experience with Elixir or the Phoenix Framework
• Familiarity with Google Cloud Platform
• Experience working with a distributed team

Responsibilities

• Build scalable, secure IAM services that enable new features and products across the onX suite of apps
• Design and implement backend systems focusing on observability, fault-tolerance, security, and high performance
• Drive architectural decisions related to Identity and Access Management, ensuring alignment with and advancing our broader platform strategy
• Define and implement SLIs/SLOs for IAM services; drive reliability engineering practices including incident response and performance optimization
• Write thorough unit, integration, and acceptance tests to ensure high service quality and maintainability
• Document APIs, service architectures, and technical decisions for internal stakeholders and external partners as needed
• Collaborate closely with fellow engineers, product managers, and other stakeholders through design reviews, paired programming, and cross-functional planning sessions
• Leverage and extend existing onX services and platform patterns to drive consistency and reduce duplication
• Proactively improve system monitoring, alerting, diagnostics, and operational readiness of IAM-related services
• Participate in an on-call rotation to ensure backend services remain highly available and reliable
• Mentor and share knowledge with engineers on your team
• Lead by example and embody onX's company values, fostering a culture of technical excellence, ownership, and collaboration

Benefits

• Competitive salaries, annual bonuses, equity, and opportunities for growth
• Comprehensive health benefits including a no-monthly-cost medical plan
• Parental leave plan of 5 or 13 weeks fully paid
• 401k matching at 100% for the first 3% you save and 50% from 3-5%
• Company-wide outdoor adventures and amazing outdoor industry perks
• Annual “Get Out, Get Active” funds to fuel your active lifestyle in and outside of the gym
• Flexible time away package that includes PTO, STO, VTO, quiet weeks, and floating holidays

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: Associate degree