Domino Data Lab
Staff Software Engineer, Identity and Authorization
$250K–$280K
Remote US +1 · Remote · Staff · Full-time · Posted Oct 7, 2026
- Location
- Remote US
Remote Argentina
About the job
Lead the architecture and evolution of Domino’s centralized identity and relationship-based authorization platform for enterprise customers.
What you'll do
- Set architectural direction for reusable, fine-grained authorization and guide migration from legacy access checks.
- Harden identity and authorization services for enterprise scale, reliability, and security; improve architecture and reduce technical debt.
- Lead design reviews, advise teams building on the platform, and establish practices for secure AI-assisted development.
What they ask for
- Hands-on experience with relationship-based or fine-grained authorization, including schema design and tradeoffs versus RBAC.
- Grounding in OIDC and SAML, plus practical cloud workload identity experience.
- Strong Go, Java, or comparable language; experience running services on Kubernetes and designing platform APIs.
- Experience architecting authentication or authorization frameworks that scale to enterprise customers.
Nice to have
- Experience designing a new authorization system and migrating from a legacy approach.
- Experience at a company building authentication or authorization products; experience with an IdP such as Keycloak, Auth0, Okta, or ForgeRock is also noted as ideal.
Pay
$250,000 — $280,000 USD (base salary)
Tools
SpiceDB, OIDC, SAML, Keycloak, Auth0, Okta, ForgeRock, Kubernetes
AI focus
Establish patterns for AI-assisted development and use AI coding tools to ship high-quality features faster while maintaining security and code quality.
Model-written summary · the original posting is authoritative