Staff Software Engineer - IAM

Responsibilities

• Define the long-term architecture and technical roadmap for the IAM platform
• Lead identity, authentication, authorization, and access governance initiatives
• Establish standards, reference architectures, and best practices for IAM across the organization
• Design, implement, and operate core IAM platform services
• Build integrations between identity providers, API gateways, and authorization systems
• Develop services for user lifecycle management, machine identity, and compliance reporting
• Design authorization models supporting RBAC, ABAC, and multi-tenant environments
• Partner with security and compliance teams to meet regulatory requirements

Requirements

• 12+ years of software engineering experience with distributed systems or security infrastructure
• Deep expertise in IAM, authentication, authorization, federation, and access governance
• Strong hands-on experience with OAuth 2.0, OpenID Connect (OIDC), SAML, JWTs, and MFA
• Experience implementing or integrating enterprise IAM platforms like Zitadel, Keycloak, Okta, or Auth0
• Understanding of multi-tenant SaaS architectures and tenant isolation
• Experience designing RBAC, ABAC, and policy-based authorization
• Strong software engineering skills with modern backend technologies and cloud-native architectures
• Proven track record of leading large cross-functional technical initiatives

Preferred Qualifications

• Direct experience implementing or operating Zitadel in production
• Experience integrating IAM with Microsoft Entra ID, Okta, or Google Workspace
• Experience with policy engines like Open Policy Agent (OPA) or Cedar
• Experience with machine identity lifecycle and secrets management
• Familiarity with compliance frameworks such as SOC 2, ISO 27001, or NIST

About the Company

Kaseya is the leading provider of AI-powered IT management and cybersecurity software, serving Managed Service Providers (MSPs) and internal IT organizations worldwide.