Domino Data Lab
Staff Software Engineer, Identity and Authorization
Remote Canada +2 · Remote · Staff · Full-time · Posted Oct 19, 2026
- Location
- Remote Canada
Remote Argentina
Remote US
About the job
Serve as the technical anchor for Domino’s identity and access platform, evolving its authorization architecture and guiding its adoption across engineering teams.
What you'll do
- Set architectural direction for secure, scalable, reusable identity and authorization capabilities.
- Lead design reviews, guide engineers, reduce technical debt, and support migration from legacy access checks.
- Establish patterns for AI-assisted development that preserve code quality and security.
What they ask for
- Production experience evolving enterprise-grade authorization systems under real traffic.
- Hands-on experience with relationship-based or fine-grained authorization, including schema design and tradeoffs versus RBAC.
- Solid grounding in OIDC and SAML; practical experience with cloud workload identity patterns.
- Strong Go, Java, or a comparable language; experience with Kubernetes, platform APIs, and enterprise-scale auth architecture.
Nice to have
- Experience designing a new authorization system and migrating from a legacy approach.
- Experience at an authentication or authorization product company; familiarity with an IdP such as Keycloak, Auth0, Okta, or ForgeRock, or a credential management system such as Vault.
Tools
SpiceDB, AWS IRSA, Azure Workload Identity, GCP Workload Identity Federation, OIDC, SAML, Go, Java
AI focus
Establish patterns for using AI-assisted development and coding tools to ship high-quality features faster while maintaining security and code quality.
Model-written summary · the original posting is authoritative