Senior Software Engineer, Identity Software

Front Door Defense; Greater London; On-site; GBP 110,000 - 165,000; Full time

Job summary

Scale AI is seeking a Senior Software Engineer, Identity, in London to design and implement scalable identity infrastructure for secure authentication and authorization across enterprise systems. You will own identity tooling and contribute to the architecture of SSO, MFA, and federated identity solutions.

You will collaborate across teams, drive security governance, and apply knowledge of OAuth/OIDC, SAML, JWT, and RBAC/ABAC models to deliver reliable access control in a distributed cloud

Qualifications

• 5+ years of full-time engineering experience in identity systems.
• Infrastructure as Code (Terraform, Pulumi) experience.
• Hands-on experience with OpenFGA, Authzed, Cedar, Topaz, or similar authorization frameworks.
• Strong understanding of Zanzibar-based ReBAC models and access-control evaluation.
• Knowledge of OAuth 2.0, OIDC, SAML, JWT and IdP solutions like EntraID, Okta, etc.
• Experience with distributed systems and cloud platforms (AWS preferred).
• Track record of independent ownership of engineering projects.
• Excellent communication and collaboration skills with non-technical stakeholders.

Responsibilities

• Design and implement identity infrastructure for secure authentication and authorization across enterprise systems.
• Develop authentication mechanisms (SSO, MFA, federated identity) and authorization models (RBAC, ABAC, ReBAC).
• Create identity governance policies to ensure compliance with security standards and regulations.
• Present technical information to teams and stakeholders and provide guidance on identity management.

Skills

Identity systems

Distributed systems

Communication

Ownership

Tools

OpenFGA

Authzed

Cedar

Topaz

Terraform

Pulumi

Job description

Senior Software Engineer, Identity

Design and implement scalable identity infrastructure for secure authentication and authorization.

Location: London, England, United Kingdom

Job Tags: Software

About The Role

Senior Software Engineer, Identity

London, UK

At the foundation of these products is the Identity Engineering team. In this role, you will help support the design and development of core software systems specifically focused on identity, access management, authorization, and authentication. You'll also get widespread exposure to the forefront of the AI race as Scale sees it in enterprises, startups, governments, and large tech companies.

You will:

• Drive the design, and implementation of our identity infrastructure to ensure secure authentication and authorization across enterprise systems.
• Build software for authentication mechanisms such as Single Sign-On (SSO), Multi-Factor Authentication (MFA), and federated identity solutions (SAML, OAuth, OpenID Connect).
• Build software for authorization mechanisms such as Relation-based access control (ReBAC), Attribute-based access control (ABAC), Role-based access control (RBAC).
• Build software‑defined identity governance policies to ensure compliance with security policies, industry regulations (e.g., NIST, SOC2, ISO 27001), and organizational standards.
• Present technical information to teams and stakeholders, providing guidance and insight on identity management and best practices.

Ideally you'd have:

• 5+ years of full‑time engineering experience, post‑graduation with specialities in infrastructure and identity systems.
• Infrastructure expertise – IAM controls, Infrastructure as Code (Terraform, Pulumi), microservice deployment best practices.
• Hands‑on experience working with OpenFGA, Authzed, Cedar, Topaz, or similar authorization frameworks at scale.
• Strong understanding of Zanzibar‑based ReBAC models, relationship tuples, and access control evaluation.
• Strong knowledge of authentication standards such as OAuth 2.0, OIDC, SAML, and JWT, as well as industry standard IdP solutions like EntraID, Okta, etc.
• Extensive experience in software development and a deep understanding of distributed systems and public cloud platforms (AWS preferred).
• Show a track record of independent ownership of successful engineering projects.
• Possess excellent communication and collaboration skills, and the ability to translate complex technical concepts to non-technical stakeholders.

Nice to haves:

• Experience securing API access and implementing access control mechanisms at the application level.
• Multi‑cloud infrastructure experience – AWS, Azure, GCP, and more.
• Proficiency in integrating IAM solutions with applications built using frameworks such as Java, Python, Node.js, or .NET.
• Mentorship/leadership experience supporting junior engineers

PLEASE NOTE: Our policy requires a 90-day waiting period before reconsidering candidates for the same role. This allows us to ensure a fair and thorough evaluation of all applicants.

We believe that everyone should be able to bring their whole selves to work, which is why we are proud to be an inclusive and equal opportunity workplace. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability status, gender identity or veteran status.

We are committed to working with and providing reasonable accommodations to applicants with physical and mental disabilities. If you need assistance and/or a reasonable accommodation in the application or recruiting process due to a disability, please contact us at [e-mail]. Please see the United States Department of Labor's Know Your Rights poster for additional information.

We comply with the United States Department of Labor's Pay Transparency provision.

PLEASE NOTE: We collect, retain and use personal data for our professional business purposes, including notifying you of job opportunities that may be of interest and sharing with our affiliates. We limit the personal data we collect to that which we believe is appropriate and necessary to manage applicants' needs, provide our services, and comply with applicable laws. Any information we collect in connection with your application will be treated in accordance with our internal policies and programs designed to protect personal data. Please see our privacy policy for additional information.