Staff Software Engineer

About the Company

Kaseya is the leading provider of AI-powered IT management and cybersecurity software, serving Managed Service Providers (MSPs) and internal IT organizations worldwide. Backed by Insight Partners, Kaseya supports customers in more than 20 countries and manages over 15 million endpoints worldwide.

Responsibilities

• Define the long-term architecture and technical roadmap for the IAM platform
• Lead identity, authentication, authorization, and access governance initiatives
• Establish standards, reference architectures, and best practices for IAM across the organization
• Design, implement, and operate core IAM platform services
• Build integrations between identity providers, API gateways, and authorization systems
• Develop services supporting user lifecycle management and machine identity management
• Design authorization models supporting RBAC, ABAC, and multi-tenant environments
• Ensure complete auditability of access grants and modifications

Requirements

• 12+ years of software engineering experience with distributed systems or security infrastructure
• Deep expertise in IAM, authentication, authorization, federation, and access governance
• Hands-on experience with OAuth 2.0, OpenID Connect (OIDC), SAML, JWTs, MFA, and enterprise SSO
• Experience implementing or integrating enterprise IAM platforms like Zitadel, Keycloak, Okta, or Auth0
• Experience building identity platforms by leveraging open-source technologies
• Strong understanding of multi-tenant SaaS architectures and B2B identity models
• Experience designing RBAC, ABAC, and policy-based authorization
• Experience building secure API platforms and service-to-service authentication
• Proven track record of leading large cross-functional technical initiatives

Preferred Qualifications

• Direct experience implementing or operating Zitadel in production
• Experience integrating IAM with Microsoft Entra ID, Okta, or Google Workspace
• Experience with policy engines like Open Policy Agent (OPA) or Cedar
• Experience with machine identity lifecycle and secrets management
• Familiarity with compliance frameworks such as SOC 2, ISO 27001, or NIST