Staff Software Engineer, Identity and Access Management

About This Opportunity

We are representing a confidential SaaS organization in their search for a Staff Software Engineer, Identity and Access Management based in Canada. Our client is building next-generation API infrastructure and needs an experienced identity platform architect to design and implement their multi-tenant identity systems supporting complex organizational hierarchies, cross-tenant isolation, and enterprise-grade security controls.

Responsibilities

• Design and implement advanced token management systems, including refresh token rotation, proof-of-possession tokens, and custom token introspection with real-time revocation capabilities
• Lead development of extensible claims engines supporting dynamic attribute resolution, contextual claim injection, and complex business logic evaluation at token issuance
• Architect global identity infrastructure with edge optimization, intelligent token caching, and cross-region replication strategies for sub-millisecond authentication latency worldwide
• Design sophisticated rate limiting, anomaly detection, and fraud prevention systems to protect against credential stuffing, token abuse, and distributed attacks
• Build enterprise identity federation capabilities, including SAML bridge patterns, external IdP chaining, and custom protocol adapters for legacy system integration
• Lead technical strategy for developer experience, including SDKs, webhooks, audit logging, and real-time analytics dashboards for token lifecycle visibility
• Architect advanced client management systems supporting dynamic client registration, automated credential rotation, and programmatic policy enforcement
• Design plugin architectures enabling custom grant flows, protocol extensions, and third-party integrations while maintaining security boundaries
• Drive implementation of compliance frameworks (SOC 2, FedRAMP, GDPR), including comprehensive audit trails, data residency controls, and privacy-preserving token designs
• Lead technical initiatives for integration with observability platforms, supporting distributed tracing, metrics collection, and security event correlation
• Mentor engineering teams on advanced identity concepts including zero-trust architectures, workload identity, and service mesh integration patterns

What We're Looking For

• 7+ years of experience building production identity platforms at leading identity providers or enterprise software companies, with proven track record of handling millions of authentication requests daily
• Deep expertise in advanced OAuth 2.0 extensions (PKCE, mTLS, JWT bearer assertions, token exchange), OpenID Connect profiles, and emerging standards like OAuth 2.1 and GNAP
• Proven experience architecting multi-tenant identity platforms with complex isolation requirements, tenant-specific configurations, and enterprise feature sets
• Strong background in cryptographic protocols including advanced JWT patterns, key rotation strategies, Hardware Security Module (HSM) integration, and post-quantum cryptography considerations
• Experience building identity platforms with sophisticated analytics, real-time monitoring, and security event detection capabilities at enterprise scale
• Expertise in global identity infrastructure including edge deployment strategies, geo-distributed token validation, and cross-region data consistency patterns
• Deep understanding of enterprise identity integration patterns including SAML federation, LDAP/AD bridges, SCIM provisioning, and custom protocol adapters
• Proven track record building developer-first identity platforms including comprehensive SDKs, webhook systems, and extensible API designs
• Experience with identity platform security including threat modeling, penetration testing coordination, and implementation of advanced attack prevention mechanisms
• Strong background in compliance and regulatory requirements for identity systems including audit trail design, data residency controls, and privacy engineering
• Experience building identity platforms supporting complex organizational structures, delegated administration, and fine-grained permission models
• Expertise in high-performance system design including horizontal scaling strategies, caching architectures, and latency optimization for identity operations
• Knowledge of service mesh identity patterns, workload identity bootstrapping, and integration with container orchestration platforms
• Experience with identity protocol extensions, custom grant flows, and building extensible identity platforms that support diverse use cases
• Proven ability to lead technical initiatives in complex, regulated environments while balancing innovation with security and compliance requirements

How We Work With You

Our talent team at Get A Job.ai partners with exceptional technology organizations seeking senior engineering leadership. When you apply through our platform, a dedicated recruiter will review your background and conduct an initial screening call. If there's a strong mutual fit, we will submit your profile to our client for consideration. Please note that all applications must go through Get A Job.ai—direct contact with the client is not part of this process.

Pay

Compensation details will be discussed during the screening process and are competitive with senior staff-level engineering roles in the Canadian market.

Equal Opportunity: Get A Job.ai is committed to inclusive recruiting practices. We encourage applications from candidates of all backgrounds and experiences.