Senior Software Engineer, Identity & Access Management

Crusoe•San Francisco, CA

2d•$170,000 - $205,000

About The Position

Crusoe is seeking a Senior Software Engineer to design, build, and scale its Identity & Access Management (IAM) platform, which secures customer workloads in Crusoe Cloud. IAM authorizes cloud requests with single-digit-millisecond latency, making performance and reliability critical. The platform includes fine-grained authorization for cloud resources, enterprise single sign-on and identity federation, multi-tenant organization hierarchies, identity for AI agents, and credential and secrets management. The engineer will own significant IAM services end to end, collaborate across teams, and raise technical standards through mentorship and code review.

Requirements

Bachelor's degree in Computer Science or a related field, or equivalent practical experience.
At least 5 years of software development experience, primarily in Go and gRPC or an equivalent compiled language.
Proven ability to design and scale fault-tolerant distributed systems and develop managed cloud services.
Hands-on experience building authentication and authorization into production services, including OAuth2/OIDC, RBAC/ABAC, session, credential, and secrets management.
Strong security fundamentals, including encryption and TLS.
Experience operating services, including on-call responsibilities, observability through metrics, logging, and alerting, and maintaining reliable latency-sensitive systems.
Strong API design skills in gRPC and REST, and experience modeling multi-tenant identity hierarchies such as users, organizations, projects, and resource boundaries.
Ability to work with cross-functional teams to align priorities and deliver customer-first solutions.
Experience mentoring engineers and providing thoughtful, constructive code reviews.
Exceptional ability to articulate complex ideas and align technical solutions with customer and business needs.

Nice To Haves

Hands-on experience with IAM or authorization frameworks such as Ory, SpiceDB, or OpenFGA.
Familiarity with SAML, JWT, identity federation, SCIM, and WebAuthn.
Experience with cloud-native tooling such as Kubernetes, Docker, Terraform, and CI/CD systems.
Experience with multi-tenant isolation, audit, or compliance (such as SOC 2) for security-critical platforms.
Experience with identity for AI agents and agentic workloads, or GPU/AI cloud infrastructure.
Contributions to open-source security, identity, or distributed-systems projects.

Responsibilities

Own the end-to-end design, development, and operation of core IAM services, including authorization, authentication, identity federation, and identity lifecycle.
Design and build platform-level solutions for complex authentication and authorization scenarios, including fine-grained access to Crusoe Cloud resources.
Deliver low-latency, fault-tolerant services that remain highly available under load.
Apply security best practices, including OAuth2/OIDC, RBAC/ABAC, and session and credential management.
Contribute to architectural decisions supporting security, reliability, and maintainability.
Collaborate with product, design, security, and SRE teams to evaluate tools, frameworks, and customer needs and deliver customer-first solutions.
Mentor engineers, improve hiring and onboarding practices, perform code reviews, and contribute to an inclusive engineering culture.