Staff Software Engineer - Identity and Access Management (IAM)

About the Company

Kaseya is the leading provider of AI-powered IT management and cybersecurity software, serving Managed Service Providers (MSPs) and internal IT organizations worldwide. Backed by Insight Partners, Kaseya supports customers in more than 20 countries and manages over 15 million endpoints worldwide.

Responsibilities

• Define the long-term architecture and technical roadmap for the IAM platform
• Lead identity, authentication, authorization, and access governance initiatives
• Design, implement, and operate core IAM platform services
• Build integrations between identity providers, API gateways, and authorization systems
• Design authorization models supporting RBAC, ABAC, and multi-tenant environments
• Evaluate and leverage open-source IAM technologies to accelerate delivery
• Establish engineering practices for platform reliability, performance, and maintainability

Requirements

• 8+ years of software engineering experience with distributed systems or security infrastructure
• Deep expertise in IAM, authentication, authorization, federation, and access governance
• Strong hands-on experience with OAuth 2.0, OpenID Connect (OIDC), SAML, JWTs, and MFA
• Experience implementing or integrating enterprise IAM platforms (e.g., Zitadel, Keycloak, Okta, Auth0)
• Strong understanding of multi-tenant SaaS architectures and tenant isolation
• Experience designing RBAC, ABAC, and policy-based authorization
• Proven track record of leading large cross-functional technical initiatives

Preferred Qualifications

• Direct experience implementing or operating Zitadel in production
• Experience with policy engines like Open Policy Agent (OPA) or Cedar
• Experience integrating IAM with Microsoft Entra ID, Okta, or Google Workspace
• Experience with machine identity lifecycle management and secrets management
• Familiarity with compliance frameworks such as SOC 2, ISO 27001, or NIST