Sr Backend Engineer, Identity & Access Management

LaunchDarkly

1d•$163,000 - $263,670

About The Position

Software powers the world, and LaunchDarkly empowers teams to deliver and control it safely. As a Senior Backend Engineer on the Identity & Access Management team, you will own the systems every customer touches before they touch anything else: SAML and OAuth2 single sign-on, SCIM user and team provisioning, login and session management, multi-factor authentication, and the API key and token infrastructure that authenticates every request to our platform. When authentication is wrong, customers cannot get in at all — or the wrong person gets in. Security and availability here are commitments to our customers, not nice-to-haves. You and your team will make this stack operable and enterprise-ready. Technologies include Go, TypeScript, CockroachDB, Redis, AWS, and Terraform. Exact tool match matters far less than deep backend judgment and a track record of safely changing systems that are not allowed to be wrong.

Requirements

6+ years of professional software-engineering experience, with significant work on complex backend applications.
Experience building or operating production authentication and identity systems.
A track record on systems where correctness and availability are non-negotiable, and the habits that come with it: backward-compatible change, staged rollouts, and safe cutovers.
Proficiency in at least one backend language (Go, Rust, Python, etc.) and familiarity with cloud infrastructure (AWS or equivalent), plus strong production ownership including on-call.

Nice To Haves

Protocol depth in SAML, OIDC/OAuth2, or SCIM, and integration experience with Okta, Microsoft Entra ID, Google Workspace, OneLogin, or Ping.
MFA/WebAuthn, RBAC and authorization policy engines, or audit logging at multi-tenant scale.
Engineering under compliance regimes such as SOC 2 or FedRAMP.

Responsibilities

Own LaunchDarkly’s authentication surface end to end — single sign-on, SCIM provisioning, login and session flows, multi-factor authentication, and API key and token authentication.
Build the enterprise identity capabilities our largest customers require: additional identity-provider integrations, support for multiple IdPs per account, and MFA enforcement by default.
Make the stack operable: SLOs, monitoring for certificate expiry and provisioning failures, actionable alerting, runbooks, and a sustainable on-call.
Partner with Product Security on threat modeling, audit logging, and compliance requirements including SOC 2 and FedRAMP.
Set the technical direction for identity at LaunchDarkly, and raise the bar for the engineers around you through design review and mentorship.