Senior Backend Engineer- Users Infrastructure

Weave•Lehi, UT

1d•Remote

About The Position

At Weave (NYSE: WEAV), we’re on a mission to elevate the patient experience by giving healthcare practices the tools they need to run more efficiently and meaningfully connect with their patients. With 30,000+ customers and growing, Weave’s all-in-one platform supports every interaction from scheduling and payments to communication and reviews making it easier for healthcare professionals to focus on what matters most: patient care. As a Senior Backend Engineer on our Users Infrastructure team you'll join a high-trust, high-impact team helping to shape the future of healthcare technology. You will architect the foundational security and identity substrate that every Weave product depends on. You will lead the transition from legacy authorization to a modern, globally distributed Identity and Access Management (IAM) platform powered by SpiceDB and Go. This is a high-leverage role requiring a blend of secure backend engineering and the leadership maturity to grow a new regional hub for a Tier-1 infrastructure unit. You’ll thrive here if you care deeply about customers, lead with curiosity, and live by our core values: Think creatively. Stay hungry. Do the right thing. Care more. The customer is everything. If you're excited about transforming healthcare with purpose-driven work and smart teammates by your side, we'd love to meet you.

Requirements

5+ years of backend engineering with significant time spent building distributed systems in Go.
Deep understanding of AuthN/AuthZ primitives: OAuth 2.0, OIDC, SAML, and JWT mechanics.
Proven ability to manage complex data migrations, distributed architecture and build gRPC-based microservices.
Exceptional written clarity; the ability to write Technical Design Documents (TPDs) that bridge the gap between India and US-based stakeholders.

Nice To Haves

You have previously been an early member of a distributed team and understand how to build culture across time zones.
You treat "Zero-Trust" as a default, not a buzzword, and have experience with Zanzibar-style authorization or SpiceDB.
You don't just ship code; you ship alerts, dashboards, and runbooks (and you have a "stop-and-fix" mentality).

Responsibilities

Own the core services responsible for authenticating every entity, human and machine, within the ecosystem, managing the trade-offs between stateless scalability and real-time session revocation.
Define how fine-grained permissions are modeled, inherited, and enforced across a massive, multi-tenant hierarchy of organizations and locations.
Own the internal SDKs, gRPC contracts, and middleware that allow over 150+ downstream engineers to integrate security features into their products without needing to be cryptography experts.
Manage the infrastructure that bridges our platform with the world, including federated identity (SSO), automated provisioning (SCIM), and secure machine-to-machine (M2M) communication protocols.
Improve system observability (MTTD/MTTR) by integrating monitoring and load-testing protocols into our Tier-1 services.
Act as the guardian of the "Source of Truth," owning the immutability and reliability of our audit logging pipelines and the consistency of identity data.
As a founding member of the regional hub, own the technical bar and operational culture for the India-based arm of the team, ensuring seamless asynchronous collaboration with the US-based team members.