Job Description

Remote, US | $180K–$230K base + equity

About the Company

Our client is a well-funded, stealth-stage enterprise identity startup founded by a proven team that has already built and exited a successful enterprise software company to a major technology company.

The company is building a next-generation identity platform for modern businesses, with a focus on secure-by-design architecture, excellent user experience, and deep technical craft. The team is small, highly experienced, and fully remote across the US and Canada.

About the Role

This is a rare opportunity to design and build a greenfield authorization layer from the ground up.

You will own the core authorization domain across the platform, including access-control models, schemas, policy enforcement, and authorization services. The current engineering team is made up of strong generalists, so this hire will be the dedicated authorization expert who helps set the technical direction and levels up the rest of the team.

What You’ll Do

• Design and implement the authorization layer for a new enterprise identity platform
• Build models, schemas, and policy enforcement systems for fine-grained access control
• Develop authorization services and proxies that evaluate permissions across service boundaries
• Build customer-facing policy management APIs
• Work with authentication and identity protocols such as OAuth 2.0, SAML, OIDC, and WebAuthn
• Write production Go and contribute across the backend platform
• Partner closely with product, design, and engineering leadership on architecture decisions

What We’re Looking For

• 4+ years of experience in authorization, IAM, backend security, or infrastructure software
• Production experience building or operating authorization systems
• Production proficiency in Go
• Deep understanding of RBAC, ABAC, or ReBAC models
• Experience with OAuth 2.0, SAML, OIDC, or WebAuthn
• Strong backend engineering fundamentals
• PostgreSQL / SQL schema design experience
• Low-ego, collaborative approach in a small-team environment

Nice to Have

• Experience at an identity, authentication, authorization, cloud, or infrastructure company
• Experience with Kubernetes, PKI, compliance frameworks, or cloud infrastructure
• Early-stage or greenfield product development experience
• Experience building enterprise SaaS or security products