We are seeking a Software Engineer specializing in Account Lifecycle and Access Management (IAM). In this role, you will play a pivotal role in designing, building, and maintaining scalable, high-performance systems. Leveraging JavaScript/TypeScript, Node.js, SQL and NoSQL cloud-native databases, and AWS, you will develop innovative solutions for user, group, and membership management while ensuring the highest levels of security and reliability.

This role is ideal for a problem-solver who thrives in a collaborative, fast-paced environment and is excited by the opportunity to tackle complex challenges, scale distributed systems, and shape the future of IAM solutions on a robust AWS infrastructure.

If you’re based within a pre-determined commuting distance of one of our offices (SF, NY, London, or Berlin), the role includes in-office anchor days on Monday, Tuesday, and Friday. If you're located beyond that distance, the role is fully remote. For location-specific details, please connect with our recruiting team.

• What You Will Do:
• Enable us to deliver secure, reliable, and scalable services that exceed industry standards and customer expectations.
• Collaborate with cross-functional teams to deliver large-scale projects with cross-team dependencies.
• Collaborate with peer teams to deliver solutions that meet industry standards and customer expectations.
• Maintain and operate services at high scale, participating in scheduled on-call rotations to ensure reliability.
• Develop and maintain enterprise-grade IAM solutions, focusing on user, group, and membership management.
• Implement identity synchronization and lifecycle management solutions using SCIM and other relevant standards.
• Work with Infrastructure as Code (Terraform, AWS CloudFormation, Kubernetes, etc.) to deliver scalable, high-availability applications.
• Design and implement robust access control models using OAuth, OpenID Connect (OIDC), SAML 2.0, and other protocols.
• Build and maintain high-quality enterprise software using TypeScript, REST APIs, and JSON.
• About You:
• 3+ years of experience with IAM architectures and implementing cloud computing solutions (AWS preferred).
• Proficiency in TypeScript/JavaScript, React, and Node.js.
• Strong knowledge of security architecture, LDAP, Active Directory, SAML, SSO,, OAuth2, OpenID Connect and web protocols like XML, SOAP, JSON, and REST.
• Familiarity with access control models such as RBAC, ABAC and ReBAC.
• Enthusiasm to work with and learn more about Identity Protocols like OAuth2, OIDC, and SAML.
• Experience with SQL.
• Hands-on experience implementing identity lifecycle management solutions using SCIM.
• Practical experience developing and improving applications written in Node.js.
• Exhibit excellent problem-solving abilities and effective communication skills, especially when collaborating with diverse teams.

• Competitive compensation package, including equity.
• Inclusive Healthcare Package.
• Learn and Grow - we provide mentorship and send you to events that help you build your network and skills.
• Flexible Time Off.
• We will provide you the gear you need to do your role, and a WFH budget for you to outfit your space as needed.

The San Francisco, CA base pay range for this role is $196,000-$294,000. Actual salary will be based on job-related skills, experience, and location. Compensation outside of San Francisco may be adjusted based on employee location. The total compensation package may include benefits, equity-based compensation, and eligibility for a company bonus or variable pay program depending on the role. Your recruiter can share more details during the hiring process.

Company is committed to fostering and empowering an inclusive community within our organization. We do not discriminate on the basis of race, religion, color, gender expression or identity, sexual orientation, national origin, citizenship, age, marital status, veteran status, disability status, or any other characteristic protected by law. Company encourages everyone to apply for our available positions, even if they don't necessarily check every box on the job description. #LI-CL1