Domino Data Lab
Staff Software Engineer, Identity and Authorization
Remote Argentina +1 · Remote · Staff · Full-time · Posted Oct 19, 2026
- Location
- Remote Argentina
Remote US
About the job
Set the architectural direction for Domino’s identity and authorization platform, evolving it into a centralized, relationship-based system for enterprise customers.
What you'll do
- Design reusable identity and authorization solutions and guide architecture decisions across Engineering.
- Harden the authorization layer and plan migrations from legacy access checks without disrupting customers.
- Lead design reviews, improve engineering quality and velocity, and establish safe patterns for AI-assisted development.
What they ask for
- Hands-on experience with relationship-based or fine-grained authorization, including schema design and tradeoffs versus RBAC.
- Solid grounding in OIDC and SAML.
- Practical experience with cloud workload identity patterns.
- Strong Go, Java, or a comparable language; Kubernetes service experience and platform API design skills.
Nice to have
- Experience designing a new authorization system and migrating from a legacy approach.
- Experience with an identity provider such as Keycloak, Auth0, Okta, or ForgeRock.
Tools
SpiceDB, OIDC, SAML, Keycloak, Auth0, Okta, ForgeRock, Vault
AI focus
Establish patterns for AI-assisted development that improve delivery speed while maintaining code quality and security rigor.
Model-written summary · the original posting is authoritative