Staff Software Engineer - Customer Identity & Access Management (CIAM)
Fastly · Denver, CO; New York City, NY; San Francisco, CA
About this role
**Staff Software Engineer — Customer Identity & Access Management (CIAM)** **About Fastly** Fastly helps people stay better connected with the things they love. Its edge cloud platform enables customers to create digital experiences quickly, securely, and reliably by processing, serving, and securing applications as close to end-users as possible. **Posting Dates** - **Open:** 08/19/2026 - **Close (anticipated):** 09/17/2026 *(may close early due to applicant volume)* --- ## What You’ll Do - Design and build **secure, scalable identity services** for authentication, authorization, identity lifecycle, and related platform capabilities. - Lead complex technical initiatives **from design through production**, balancing long-term architecture with practical delivery. - Serve as a **technical lead** for one or more core CIAM platform areas (architecture, design reviews, and technical decision support). - Partner with **engineering, product, and security** to shape implementation plans, prioritize investments, and identify risks early. - Break down ambiguous problems into **practical, incremental solutions** while maintaining high engineering quality. - Champion **modern, standards-based identity patterns** and help teams adopt best practices. - Improve **reliability, security, and maintainability** through strong architecture and operational rigor. - Mentor engineers via **design reviews, technical guidance, and collaborative problem solving**. - Contribute to an inclusive engineering culture grounded in curiosity and continuous improvement. - Participate in **on-call support rotation** as needed. ## What We’re Looking For - Significant experience designing and operating **authentication/authorization systems** in production (Staff engineers typically have **7+ years** relevant experience). - Deep understanding of identity/access standards and technologies including **OIDC, OAuth, SAML, SCIM, JWT, and SSO**. - Experience with **service-to-service authentication** and secure communication patterns in distributed systems. - Strong background in **software architecture and system design** (scalability, performance, reliability, security). - Demonstrated ability to provide **technical leadership across multiple teams**. - Strong written and verbal communication skills, including clear technical documentation. ## Preferred Qualifications / Bonus Points - Experience with **Go, Java, or Ruby**. - Experience with **Keycloak**. - Production experience implementing **Role-based and Attribute-based Access Control**. - Experience designing secure identity systems with strong consideration for **authentication threats, authorization models, and operational resilience**. ## Work Hours - Available during **core business hours**, plus occasional **nights and weekends** for on-call coverage. ## Work Location(s) & Travel - Preferred locations: **San Francisco, CA; Denver, CO; New York, NY** - Fastly uses a **largely hybrid** model; strong preference for **hybrid near a local office**. - May consider **highly qualified remote candidates within the US**. - Travel: may require **quarterly travel** to align on technical designs and direction. ## Salary & Benefits (Highlights) - Estimated salary range: **$211,370 to $253,644** (starting salary may vary by experience/skills/qualifications/location). - May be eligible for **equity and discretionary bonus programs**. - Benefits include medical/dental/vision, family planning, mental health support & EAP, life
Listing freshness
CronJobs last confirmed this listing 7h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.