[Remote] Senior Software Engineer, Identity & Access Management

Note: The job is a remote job and is open to candidates in USA. DigitalOcean is a cutting-edge technology company focused on simplifying cloud solutions. They are seeking a Senior Software Engineer to join their Customer Trust & Engineering team, where the individual will be responsible for architecting and developing high-scale identity and access management systems.ResponsibilitiesArchitect for Scale: Design and develop high-availability, low-latency authentication and authorization services in Go that scale to handle massive load spikes across global regionsDrive Next-Gen Innovation: Build the IAM foundations for emerging cloud-native AI/ML platforms, designing secure token exchange patterns and identity context injection for agentic AI workflowsModernize Identity: Lead the implementation of OIDC and SAML integrations, enabling seamless federated Single Sign-On (SSO) for enterprise customers and strategic global partnersSolve Complex AuthZ: Evolve our Policy Engine (using industry standards like Rego/OPA) to support advanced resource-level permissions, dynamic scoping, and network-aware access conditionsEvolve Identity Models: Design and scale robust, multi-tenant data models to manage complex hierarchical structures (users, teams, organizations, and resource boundaries) that map to enterprise customer needsOperational Excellence: Take ownership of service reliability, from fine-tuning Kubernetes deployments to migrating legacy data pipelines to modern eventing architecturesSecurity First: Proactively identify and remediate complex security vulnerabilities, ensuring our auth flows are resilient against credential stuffing, session hijacking, and configuration theftMentor & Lead: Act as a technical lead for major workstreams, conducting deep code reviews and mentoring junior engineers in distributed systems best practicesSkills5+ years of software engineering experience, with at least 2+ years focused on Identity (AuthN/AuthZ), Security Products, or high-scale Distributed SystemsExpert-level proficiency in Go and a strong understanding of gRPC microservices architectureDeep knowledge of identity protocols (OIDC, OAuth2, SAML) and access control models (RBAC, ABAC, PBAC)Proven ability to build systems that handle consensus, replication, and partitioning at cloud scaleWorking experience with container orchestration (Kubernetes), SQL (MySQL), and Infrastructure as Code (Terraform)A track record of 'unwinding' complex legacy logic into clean, maintainable abstractionsAbility to communicate technical strategy to senior leadership and collaborate across teams (Inference, Billing, DOKS)Experience with Open Policy Agent (OPA) and RegoFamiliarity with Cloud-native deployment strategies (Canary/Blue-Green) via kubernetesBenefitsWe provide employees with reimbursement for relevant conferences, training, and education.All employees have access to LinkedIn Learning's 10,000+ courses to support their continued growth and development.We will provide you with a competitive array of benefits to support you from our Employee Assistance Program to Local Employee Meetups to flexible time off policy, to name a few.You may qualify for a bonus in addition to base salary; bonus amounts are determined based on company and individual performance.We also provide equity compensation to eligible employees, including equity grants upon hire and the option to participate in our Employee Stock Purchase Program.Company OverviewDigitalOcean provides a cloud platform to deploy, manage, and scale applications of any size. It was founded in 2012, and is headquartered in New York, New York, USA, with a workforce of 1001-5000 employees. Its website is http://www.digitalocean.com.Company H1B SponsorshipDigitalOcean has a track record of offering H1B sponsorships, with 8 in 2026, 30 in 2025, 8 in 2024, 9 in 2023, 22 in 2022, 11 in 2021, 2 in 2020. Please note that this does not guarantee sponsorship for this specific role.