Senior Software Engineer, Identity & Access

About the role

StackAI needs a senior engineer to design and own the identity and access layer that enables large enterprises to adopt the platform securely. You will be responsible for authentication, authorization, and access governance across the product, ensuring compliance and a smooth admin experience.

Key responsibilities

• Own enterprise sign‑on, delivering SSO via OIDC and SAML.
• Own authorization and RBAC with fine‑grained, query‑time enforcement.
• Own provisioning and lifecycle, implementing SCIM provisioning and directory sync.
• Own delegated and machine identity, building token exchange, on‑behalf‑of flows, service accounts and domain‑wide delegation.
• Own access governance, creating entitlements, session and token management, and audit‑ready controls at scale.

Required profile

• 4+ years building backend systems, with significant focus on identity, authentication, or authorization.
• Deep expertise in OIDC, OAuth2, SAML, token exchange, and multi‑tenant RBAC.
• Experience designing or owning enterprise SSO and identity solutions.
• Strong proficiency in Python and modern backend frameworks such as FastAPI.
• Passion for clean, well‑architected access control and admin experience.

Required skills

• Python
• FastAPI (or similar framework)
• OIDC, OAuth2, SAML
• Token exchange and on‑behalf‑of flows
• Multi‑tenant RBAC
• SCIM provisioning and directory sync
• OPA, Cedar, or Zanzibar‑style policy engines