Senior Software Engineer, Identity & Access

STACK.AI, LLC
San Francisco, CA, United States
about 2 months ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
4 years minimum
Compensation
$220,000.0 - $240,000.0
Working hours
Regular working hours
Job source

Tech stack

Artificial Intelligence Identity and Access Management Python (Programming Language) OAuth OpenID Role-Based Access Control Security Assertion Markup Language (SAML) Backend Fastapi

Job description

Every large enterprise that adopts Stack AI needs to control precisely who can do what, on whose behalf, across their whole organization. We’re hiring a Senior Software Engineer, Identity & Access to build the access layer that makes that possible: the authentication, authorization, and access control that let our largest and most regulated customers adopt Stack AI with confidence., * Own enterprise sign-on. Deliver SSO across OIDC and SAML so customers onboard with their own identity provider.

  • Own authorization and RBAC. Build role-based access control with fine-grained, query-time enforcement across the product.
  • Own provisioning and lifecycle. Deliver SCIM provisioning and directory sync so user and group management stays in step with the customer’s directory.
  • Own delegated and machine identity. Build token exchange, on-behalf-of flows, service accounts, and domain-wide delegation so agents and services act with scoped authority.
  • Own access governance. Build the entitlements, session and token management, and controls that keep access clean and auditable at scale.

Requirements

Do you have experience in Python?, * 4+ years building backend systems, with significant time spent on identity, authentication, or authorization.

  • Real depth in OIDC, OAuth2, SAML, token exchange, and multi-tenant RBAC.
  • You’ve built or owned enterprise SSO and identity systems, with a strong grasp of identity-provider architecture and enterprise auth patterns.
  • Strong in Python and modern backend frameworks (FastAPI or similar).
  • You care about clean, well-architected access control and the experience of the administrators who manage it.

Identity is broad. If you’re strong on most of this and excited to grow into the rest, we’d like to hear from you, even if you don’t check every box.

Benefits & conditions

You’ll join a lean, high-impact team and own the access layer that lets the largest enterprises adopt Stack AI. Your work ships fast and is felt across the whole product.

Stack AI is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.

Compensation Range: $220K - $240K

About the company

This is foundational work for enterprise adoption. Strong identity is what lets a large organization roll Stack AI out across many teams, and lets their administrators manage all of it cleanly. You’ll own that layer across the platform, from sign-on to fine-grained permissions.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on indeed.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

2:01 min

Implementing a layered authentication and authorization stack

Jose Manuel Ortega Jose Manuel Ortega · Europe 2026 Virtual

2:49 min

Adopting OAuth best practices and removing outdated grants

Alexander Schwartz Alexander Schwartz · WWC Europe 2026

4:35 min

Setting up passwordless federated identity configuring OpenID Connect patterns

Marcel Lupo · LIVE

1:52 min

Structuring and scaling the backend engineering team

Stefan Lingler Stefan Lingler +1 · Coffee With Developers

2:22 min

Adapting OpenID Connect for decentralized data sharing

Adam Larter Adam Larter · WWC 2024

1:34 min

Analyzing vulnerabilities in standard OAuth 2.0 authorization flows

Alexander Schwartz Alexander Schwartz · WWC Europe 2026

Videos

See all

Related articles

See all