Principal Engineer, Identity and Access Management

Overview

In this role you will lead the design and implementation of a cloud-agnostic Identity and Authorization Platform for a multi-tenant SaaS. You will own the authorization architecture across web, mobile, APIs, microservices, and AI gateways, partnering with platform teams to scale secure access. You will drive adoption of modern policy engines and authorization models to enable fine-grained, scalable access control. You will shape security strategy by aligning with the company’s core mission of protecting users, services, and data. This is a hands-on leadership role with a strong impact on platform security and developer experience.

Responsibilities

• Lead architecture and implementation of authentication, authorization, identity federation, and fine-grained access control
• Own architecture for RBAC, ReBAC, ABAC, ACL, policy engines, and relationship graphs
• Design authorization for web, mobile, APIs, microservices, AI Gateway, agent runtime, MCP tools, knowledge graph, vector stores
• Design authorization decision architecture (PEP, PDP, Policy Store, Relationship Store, Decision)
• Lead adoption of OpenFGA/SpiceDB, Cedar, Open Policy Agent (OPA), Zanzibar concepts
• Collaborate with platform teams on API Gateway, AI Gateway, Kubernetes, Service Mesh, and mTLS

Key requirements

• 10+ years of engineering experience
• 5+ years in security platform experience
• Proven experience building authorization engines (RBAC, ReBAC, ABAC, ACL)
• Experience designing authorization for multi-tenant SaaS, microservices, and APIs
• Experience with OAuth2, OpenID Connect, JWT, SAML
• Strong distributed systems background

• leadership
• cross-functional collaboration
• strong communication
• RBAC
• ReBAC
• ABAC

…