Senior Staff Software Engineer - Identity & Trust

EarnIn

16h•$238,660 - $341,000•Remote

About The Position

EarnIn is seeking a Senior Staff Software Engineer to define and evolve its Identity & Trust platform, enabling secure access and trustworthy customer onboarding across consumer and enterprise products. The role spans identity, authentication, authorization, identity verification, privacy, data protection, secure document processing, user and entity resolution, and fraud prevention. This engineer will shape multi-year platform strategy, lead architecture across multiple teams, solve ambiguous, high-impact technical problems, and establish reusable engineering patterns. The role also includes guiding the responsible adoption of AI and agentic engineering workflows, with guardrails for security, privacy, correctness, and operational reliability. Success is measured by the technical leverage and trust infrastructure created across the company, enabling product teams to build secure customer experiences efficiently. This is a remote, full-time position with a base salary range of $238,660–$341,000, plus equity and benefits.

Requirements

At least 8 years of software engineering experience, with demonstrated progression into Staff/Senior Staff-level technical leadership.
Track record defining and executing technical strategy for large-scale distributed systems or platform infrastructure.
Ability to lead architecture and delivery across multiple engineering teams and organizational boundaries without relying on direct authority.
Deep hands-on experience designing and operating secure, highly available distributed backend systems at scale.
Strong expertise in identity, trust, security, privacy, or regulated-data systems, ideally covering consumer and enterprise experiences.
Deep understanding of authentication and authorization protocols and patterns, including OAuth 2.0, OpenID Connect, SAML, RBAC/ABAC, MFA, identity federation, and token management.
Experience architecting one or more Trust domains, such as KYC/identity verification, fraud or risk systems, PII tokenization, data vaults, encryption, secure document/file processing, identity resolution, or user deduplication.
Production experience with identity platforms such as Okta, Auth0, Keycloak, or comparable internally developed identity infrastructure.
Strong proficiency in at least one modern programming language, such as Java, C#, Go, Kotlin, Python, or JavaScript/TypeScript, and ability to work effectively across language boundaries.
Deep experience with REST APIs, SQL/NoSQL data stores, Kafka or equivalent streaming platforms, Kubernetes, microservices, and event-driven architectures.
Strong operational instincts, including experience with SLOs, observability, incident response, capacity planning, disaster recovery, and production reliability for critical systems.
Hands-on experience building AI-assisted or agentic engineering workflows, including orchestration, tool use, evaluation, security boundaries, and guardrails.
Exceptional architectural judgment and ability to simplify complex systems while balancing security, privacy, reliability, scalability, developer experience, regulatory requirements, and execution speed.
Experience using AI-assisted development tools such as GitHub Copilot, Cursor, ChatGPT, or similar tools in software development workflows.

Responsibilities

Define the technical vision, architecture, and multi-year roadmap for the Identity & Trust platform, including scalable patterns for authentication, authorization, identity verification, PII protection, secure document processing, deduplication, and related capabilities.
Lead complex, ambiguous initiatives spanning multiple services and teams from problem definition and architecture through implementation, rollout, and ongoing operation.
Design highly available distributed systems and APIs using microservices, event-driven architectures, and technologies such as Kubernetes, Kafka, DynamoDB, and MySQL, emphasizing security, privacy, reliability, and regulatory requirements.
Architect solutions for OAuth 2.0, OpenID Connect, SAML, RBAC/ABAC, MFA, identity federation, KYC, PII tokenization, data vaulting, secure file ingestion and scanning, and user/entity deduplication.
Establish reusable architecture patterns, technical standards, APIs, documentation, and platform primitives for product teams.
Set operational standards for reliability, observability, SLOs, incident response, capacity planning, disaster recovery, and production readiness across critical Trust infrastructure.
Lead responsible adoption of agentic workflows and multi-agent systems for engineering, testing, debugging, operations, and analysis, with evaluation, security, and human-in-the-loop guardrails.
Mentor Staff and Senior engineers; influence technical direction through architecture reviews, technical RFCs, design reviews, and hands-on technical leadership.
Partner with Product, Security, Risk, Data Science, Design, Analytics, Infrastructure, Compliance, and executive stakeholders to translate customer, business, security, and regulatory needs into technical strategies.
Anticipate scale, security, regulatory, and product challenges; simplify fragmented capabilities into reusable platform primitives and help teams move faster without compromising trust or safety.