Staff Software Engineer, Identity & Access Management

Crusoe•San Francisco, CA

2d•$215,000 - $260,000

About The Position

Crusoe is hiring a Staff Software Engineer for its Identity & Access Management (IAM) team, which secures customer workloads across the company's AI-first cloud. IAM authorizes millions of cloud requests at single-digit-millisecond latency. The engineer will set technical direction for fine-grained authorization, enterprise single sign-on and identity federation, multi-tenant organization hierarchies, identity for agentic AI, and credential and secrets management. The role owns multi-quarter architecture across these areas and addresses ambiguous, high-impact problems involving security, reliability, latency, authorization, and tenant isolation. It combines hands-on engineering with platform-wide technical leadership: establishing standards and guardrails, making durable technology decisions, aligning teams, mentoring engineers, and shaping strategy with security, product, and company leadership.

Requirements

Bachelor's degree in Computer Science or a related field, or equivalent practical experience.
At least 8 years of software engineering experience building production distributed systems in Go.
Significant experience with identity, authorization, or other security-critical systems.
Track record of leading the design of large-scale systems.
Demonstrated ability to set technical direction and deliver complex, fault-tolerant distributed systems and managed cloud services across multiple teams.
Deep expertise in OIDC, OAuth2, SAML, JWT and token exchange; RBAC/ABAC and fine-grained or relationship-based authorization; identity federation and IdP integration; SCIM and identity lifecycle; and credential and secrets management.
Experience with threat modeling at scale.
Proven ownership of production reliability for hot-path services, including SLO definition, observability, incident response, and postmortems.
Enterprise security and compliance knowledge, such as SOC 2.
Exceptional communication and ability to align engineering, security, product, and leadership, and explain technical trade-offs to varied audiences.
Proven ability to develop senior engineers, improve engineering standards, and influence hiring and technical strategy.

Nice To Haves

Experience with policy-as-code and modern authorization engines such as OPA, Cedar, SpiceDB, or OpenFGA.
Experience with identity for AI agents and agentic workloads.
Experience building for or operating GPU or AI cloud infrastructure.
Enterprise compliance experience beyond SOC 2, such as FedRAMP or other regulated-environment frameworks.

Responsibilities

Own the multi-quarter IAM architecture for fine-grained authorization, authentication and federation, and identity lifecycle.
Define identity primitives, authorization patterns, and security guardrails across the Crusoe Cloud platform.
Lead evaluation and adoption of core IAM technologies and make durable build-versus-buy and framework decisions.
Solve high-risk, ambiguous problems such as authorization hot-path scaling, multi-tenancy, and tenant isolation while balancing security, reliability, and latency.
Write and review code on critical and complex paths and set engineering quality standards through hands-on work.
Drive cross-team technical alignment, author design reviews and RFCs, and steer execution without direct authority.
Lead threat modeling and secure-by-design practices for systems on the critical request path.
Mentor senior and mid-level engineers and contribute to hiring, onboarding, engineering standards, and technical strategy.
Own production reliability for hot-path services, including defining SLOs, building observability, and leading incident response and postmortems.