Remote Staff Software Engineer, Identity & Access

• Set the technical direction for our authentication systems and lead the most complex initiatives from conception through delivery.
• Collaborate closely with engineering leadership, product management, and cross-functional partners to define how we authenticate millions of users every day.
• Dedicate approximately 55% of time to backend development in Golang, 25% to technical leadership and cross-team collaboration, and 20% to operations and reliability.
• Define and own the technical architecture for the Identity squads authentication systems, including our edge authentication redesign.
• Lead the design and implementation of large-scale, multi-quarter initiatives in the critical path of user interaction across multiple services and teams.
• Mentor and develop senior engineers by providing technical guidance, design feedback, and support for their professional growth.
• Serve as a technical authority for identity protocols and drive alignment on how we implement and evolve OAuth, OIDC, SAML, LDAP, and SCIM across the organization.
• Drive cross-team technical alignment on authentication standards, patterns, and best practices.
• Represent us at meetups and conferences and contribute to the broader identity and authentication community.

Technologies:

• Backend
• Cloud
• Golang
• Grafana
• Support
• Kubernetes
• LDAP
• OAuth
• OpenTelemetry
• Prometheus
• React
• SAML
• Salesforce
• Security
• TypeScript
• AI
• DevOps
• HTTP

• Deep, proven expertise in distributed systems engineering with Go, and a track record of owning and delivering large-scale production systems end to end.
• Demonstrated ability to define technical direction and drive architectural decisions independently.
• Extensive experience building and operating low-latency, high-throughput services in distributed, multi-tenant environments.
• Proven track record of leading and delivering complex, multi-quarter initiatives across multiple teams or systems.
• Ability to mentor and develop senior engineers.
• Strong understanding of SLOs, SLIs, error budgets, and how to design systems that balance reliability, security, and product velocity.
• Excellent written and verbal communication skills in English, with the ability to explain complex technical decisions to diverse audiences.
• Expert-level understanding of modern identity standards and threat models, including OAuth 2.x / 2.1, OIDC, and SAML, and how to implement them securely at scale.
• Ability to work independently in a remote-first environment with strong communication skills.
• Bonus experience with Kubernetes, TypeScript/React, OpenFGA, KiFederate IDP, security-critical environments, open source contributions, and observability tooling such as Grafana, Prometheus, and OpenTelemetry.

We are Grafana Labs, the company behind the open observability cloud and Grafana Cloud, our fully managed observability platform built for scale. We serve more than 35 million users and 7,000+ customers, including Anthropic, Bloomberg, NVIDIA, Microsoft, and Salesforce. We are a 100% remote company with 1,600+ team members across 40+ countries, backed by leading investors including Lightspeed Venture Partners, Sequoia Capital, GIC, Coatue, J.P. Morgan, CapitalG, and Lead Edge Capital. This role is for a Staff Software Engineer - Identity and Access, Identity Squads, available to candidates located in the UK, Germany, Spain, Ireland, and Sweden. We offer equity, bonus where applicable, and country-specific benefits, along with a global culture built on open source roots, transparency, autonomy, trust, career growth, and 30 days of annual leave including Grafana Shutdown Days.