> Markdown version of [/jobs/ext/4629737-staff-software-engineer-security](https://www.wearedevelopers.com/jobs/ext/4629737-staff-software-engineer-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Staff Software Engineer, Security

- **Company:** Tempus Inc
- **Location:** Redwood City, CA, United States (Remote available)
- **Salary:** $200,000.0 - $260,000.0
- **Contract:** Permanent contract
- **Skills:** JavaScript (Programming Language), Amazon Web Services, Cloud Computing, Identity and Access Management, Python (Programming Language), Node.Js, OAuth, Role-Based Access Control, Azure Active Directory, Security Assertion Markup Language (SAML), Software Engineering, TypeScript, Google Cloud, Okta, Kubernetes, Terraform, Docker, Programming Languages, Microservices
- **Published:** November 7, 2026
- **Apply:** https://www.juju.com/job/28_25304_7381b06d664a3f37e05e110356bf6363

## About the Role

* You have experience setting the technical vision and direction for a product area, advocating for proven design principles and technology choices.
 * You know when to implement identity standards, and where they need to be innovated on.
 * You're got several years of experience working on software development teams, and are confident leading technical analysis & design, evaluating tradeoffs, leading build and buy decisions from a technical perspective, and establishing best practices.
 * You have experience developing and securing distributed, event-based systems at an interesting scale of transaction and/or data volume
 * You've worked in fast-paced, agile environments and helped keep projects on track, troubleshoot roadblocks, write documentation, and coordinate cross-team collaboration.
 * You collaborate well with diverse, talented teams while mentoring and learning from team members regardless of experience level.
 * You have experience working with cloud infrastructure providers (Amazon Web Services, Google Cloud, etc), and related tools like Docker, Terraform, or Kubernetes.
 * You have familiarity with an identity management platform like Auth0, Okta, Microsoft Entra, or Ping Identity.
 * You are a polyglot coder - you have experience with and are comfortable using a variety of programming languages and frameworks, and picking up new ones., * Deep knowledge of identity standards like OAuth, SCIM, and SAML
 * Experience with TypeScript, JavaScript, Node.JS, or Python.
 * Experience with OAuth 2.1 emerging agentic controls
 * Experience with Chronicle or other SIEMsExperience with various Authorization models, RBAC, ReBAC, ABAC, and PBAC and their implementation tradeoffs

## Description

* Lead technical decisions for the security engineering team and implement best in class customer identity management, authorization, and observability systems across the business.
 * Manage and improve the existing security microservices, custom frameworks, and tooling by identifying technical gaps, incorporating new requirements, and implementing emerging standards.
 * Work with a variety of teams cross-functionally to implement internal standards for security across a microservice driven architecture.
 * Work with product team members and stakeholders to discuss project priorities, scope, and trade-offs to deliver the right solutions at the right time.
 * Discover deficiencies in engineering tooling, designs, and processes and make the case for and driving improvements.
 * Help level-up engineering practice across Tempus through documentation, mentorship, training, and engagement with engineers.
 * Present new technologies and ideas to the broader organization, and the ability to communicate effectively and without bias while accepting critical feedback.
 * Lead build/buy decisions in the security domain to improve the velocity of engineering, drive down costs, and ensure secure technical excellence.