Staff Software Engineer, Identity and Authorization

• Design identity and access solutions that are secure, scalable, and reusable
• Set architectural direction for Domino’s centralized, relationship-based authorization framework built on SpiceDB
• Articulate architecture and guide Engineering decision-making
• Serve as the technical authority for identity and authorization questions
• Lead design reviews and unblock engineers facing ambiguity
• Improve architecture, remove technical debt, and reduce maintenance
• Establish patterns for AI-assisted development without compromising security or code quality
• Help the team balance quality and speed of iteration
• Improve identity and user-management experiences for enterprise customers
• Evolve authorization systems, migrate legacy access checks, and support cloud-native identity integrations

• Track record of evolving an enterprise-grade authorization system under real production traffic
• Experience designing a new auth system and migrating from a legacy approach (a plus)
• Experience on a platform team supporting other services within a larger engineering organization
• Background at a company that builds authentication or authorization products (a plus)
• Concrete example of an auth system that solved recurring customer challenges
• History of improving team designs, velocity, and quality
• Hands-on experience with relationship-based or fine-grained authorization, including schema design and RBAC tradeoffs
• Solid grounding in OIDC and SAML; ideally experience with Keycloak, Auth0, Okta, or ForgeRock
• Practical experience with AWS IRSA, Azure Workload Identity, or GCP Workload Identity Federation
• Familiarity with credential management systems such as Vault
• Strong Go, Java, or comparable language skills
• Experience running services on Kubernetes
• API design experience for platforms used by other teams
• Experience architecting authentication frameworks for enterprise customers
• Real-world experience using AI coding tools while maintaining code quality and security rigor

• Growth mindset and supportive teaching and learning environment
• Encouragement of diverse backgrounds, genders, ethnicities, abilities, and sexual orientations to apply