Sr Backend Engineer, Identity & Access Management
LaunchDarkly · Remote - US
About this role
**Sr Backend Engineer, Identity & Access Management** **About the Job** LaunchDarkly empowers teams to deliver and control software safely. As a **Senior Backend Engineer** on the **Identity & Access Management** team, you’ll own the systems customers rely on before they can access anything—covering **SAML and OAuth2 SSO**, **SCIM provisioning**, **login & session management**, **multi-factor authentication**, and the **API key/token infrastructure** that authenticates every request. When authentication is wrong, customers can’t get in—or the wrong person gets in. Security and availability are core commitments. You and your team will make the stack operable and enterprise-ready. Tech includes **Go, TypeScript, CockroachDB, Redis, AWS, and Terraform**. Tooling matters less than strong backend judgment and a track record of safely changing systems that can’t be wrong. **Responsibilities** - Own LaunchDarkly’s authentication surface end to end: **SSO**, **SCIM provisioning**, **login/session flows**, **MFA**, and **API key/token authentication** - Build enterprise identity capabilities: additional identity-provider integrations, **multiple IdPs per account**, and **MFA enforcement by default** - Make the stack operable: **SLOs**, monitoring (e.g., **certificate expiry** and **provisioning failures**), actionable alerting, runbooks, and a sustainable on-call - Partner with Product Security on **threat modeling**, **audit logging**, and compliance requirements including **SOC 2** and **FedRAMP** - Set technical direction for identity and raise the bar through **design review** and **mentorship** **Qualifications** - **6+ years** of professional software engineering with significant work on complex backend applications - Experience building or operating production **authentication/identity systems** - Proven track record where **correctness and availability** are non-negotiable (backward-compatible changes, staged rollouts, safe cutovers) - Proficiency in at least one backend language (**Go, Rust, Python, etc.**) and familiarity with cloud infrastructure (**AWS or equivalent**), including strong production ownership and on-call **Bonus** - Deep protocol knowledge in **SAML**, **OIDC/OAuth2**, and/or **SCIM**, plus integration experience with **Okta, Microsoft Entra ID, Google Workspace, OneLogin, or Ping** - Experience with **MFA/WebAuthn**, **RBAC/authorization policy engines**, or **audit logging** at multi-tenant scale - Engineering experience under compliance regimes such as **SOC 2** or **FedRAMP** **Pay** Target pay ranges (Level 5) vary by Geographic Zone: - **Zone 1** (SF/Bay Area or NYC Metro, Boston, Seattle): **$191,800 – $263,670** - **Zone 2** (Irvine, LA, Monterey, Santa Barbara, Santa Rosa, Austin, Portland, Philadelphia, Chicago): **$172,600 – $237,270** - **Zone 3** (All other US locations): **$163,000 – $224,070** *Exact compensation may vary based on skills, experience, and location. RSUs, health/vision/dental, and mental health benefits are included.* **About LaunchDarkly** LaunchDarkly helps teams ship faster with safety—enabling targeted rollouts, experimentation, and avoiding risky “big-bang” migrations. LaunchDarkly is an equal opportunity employer and values diversity. **Safety / Scam Notice** Recruiters will only contact you from **@launchdarkly.com** emails or verified LinkedIn recruiter accounts. Legitimate recruiters will never ask for money/fees/banking info before an offer, and the process won’t invol
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.