Senior Backend Engineer (Identity & Access Management)

• Software powers the world, and LaunchDarkly empowers teams to deliver and control it safely
• As a Senior Backend Engineer on the Identity & Access Management team, you will own the systems every customer touches before they touch anything else: SAML and OAuth2 single sign-on, SCIM user and team provisioning, login and session management, multi-factor authentication, and the API key and token infrastructure that authenticates every request to our platform
• When authentication is wrong, customers cannot get in at all — or the wrong person gets in. Security and availability here are commitments to our customers, not nice-to-haves
• You and your team will make this stack operable and enterprise-ready. Technologies include Go, TypeScript, CockroachDB, Redis, AWS, and Terraform
• Own LaunchDarkly’s authentication surface end to end — single sign-on, SCIM provisioning, login and session flows, multi-factor authentication, and API key and token authentication
• Build the enterprise identity capabilities our largest customers require: additional identity-provider integrations, support for multiple IdPs per account, and MFA enforcement by default
• Make the stack operable: SLOs, monitoring for certificate expiry and provisioning failures, actionable alerting, runbooks, and a sustainable on-call
• Partner with Product Security on threat modeling, audit logging, and compliance requirements including SOC 2 and FedRAMP
• Set the technical direction for identity at LaunchDarkly, and raise the bar for the engineers around you through design review and mentorship

Benefits

• Full Vision
• Full Dental
• Full Medical
• Flexible Schedule
• Healthy Lunches & Snacks
• Conference & Meetup Access
• Education Stipend
• Personalized Work Station
• Close to Public Transportation
• Bike Parking
• Team Activities
• Unlimited paid time off policy
• Work from home opportunities
• Health insurance- Exact tool match matters far less than deep backend judgment and a track record of safely changing systems that are not allowed to be wrong
• Experience building or operating production authentication and identity systems
• 6+ years of professional software-engineering experience, with significant work on complex backend applications
• A track record on systems where correctness and availability are non-negotiable, and the habits that come with it: backward-compatible change, staged rollouts, and safe cutovers
• Proficiency in at least one backend language (Go, Rust, Python, etc.) and familiarity with cloud infrastructure (AWS or equivalent), plus strong production ownership including on-call
• MFA/WebAuthn, RBAC and authorization policy engines, or audit logging at multi-tenant scale
• Protocol depth in SAML, OIDC/OAuth2, or SCIM, and integration experience with Okta, Microsoft Entra ID, Google Workspace, OneLogin, or Ping
• Engineering under compliance regimes such as SOC 2 or FedRAMP