Senior Software Engineer (Identity & Access Management)

• The Identity and Access Management team builds and maintains secure, user-friendly authentication and authorization systems that protect users, safeguard company assets, and provide a seamless access experience for developers. The team owns critical platform capabilities including login methods, step-up authentication, our custom authorization platform, account delegation flows like Copilot, Pro Access login, embedded partnerships authentication, and core vendor integrations such as Okta and Oso
• As a Senior Software Engineer on IAM, you will lead projects and initiatives to improve the security, reliability, and developer experience of our authentication, authorization, and identity platforms for customers, partners, and internal systems. You will scope and drive projects with clear impact, work cross-functionally with the broader engineering organization, help define the team’s technical quality, and help evolve the identity platform as Brex invests in signed identity propagation, delegated and agent identity, fine-grained authorization, stronger auditability, and enterprise-ready customer authentication experiences
• You will scope and drive projects with clear impact, work cross-functionally with the broader engineering organization, help define the team’s technical quality, and help evolve the identity platform as Brex invests in signed identity propagation, delegated and agent identity, fine-grained authorization, stronger auditability, and enterprise-ready customer authentication experiences
• Design, build, and operate backend systems and APIs for authentication, authorization, identity context, and audit-related workflows
• Lead engineers on initiatives end to end, from technical design and implementation through rollout, measurement, and operational support
• Improve login and access experiences across SSO, MFA, step-up authentication, delegated access, and enterprise identity flows
• Build and extend authorization systems that support custom roles, resource-aware access control, and secure defaults for product teams
• Help create durable, identity-aware audit trails and attribution for user, service, delegated, and agent-driven actions
• Partner closely with engineers across Brex to make IAM integrations secure by default and easier to adopt through clear patterns, tooling, and shared libraries
• Mentor engineers on the team to deliver high-quality code and produce operational improvements that raise the bar for reliability and maintainability across the team’s systems

Benefits

• Medical, dental & vision
• Generous vacation
• Spring Health & Calm
• Year-end company shutdown
• Milk Stork for nursing parents
• In-office days, lunches & offsites
• Commuter benefits
• 4 fully remote weeks
• Carrot Fertility benefits
• Generous parental leave- Clear communication, collaborates well across teams, and are effective in cross-functional technical discussions
• Strong software engineering fundamentals and experience building reliable production backend systems
• Experience leading complex projects and mentoring other engineers
• Demonstrating care about operational excellence and know how to improve system reliability, reduce toil, and maintain high-quality services over time
• 7+ years of professional experience designing, developing, and deploying applications
• Have strong API design fundamentals, rigor around testing, code quality, and documentation
• An understanding of core IAM concepts such as authentication, authorization, sessions, tokens, MFA, SSO, OAuth, SAML, OIDC, or RBAC
• Having a strong product and engineering judgment and can balance security, usability, and developer experience
• Experience working on identity and access management, authentication, authorization, or audit systems in a production environment
• Hands-on experience with Okta, Oso, SSO, SAML, OIDC, OAuth, passkeys, or WebAuthn
• Experience building enterprise-facing admin controls, custom roles, delegated access flows, or audit trails
• Worked on platform teams that provide shared infrastructure, paved roads, or secure-by-default frameworks for other engineering teams