Staff Backend Engineer - Users

HighLevel; India; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

HighLevel is looking for a Staff Engineer to serve as a technical anchor for identity and security across its multi-tenant SaaS platform. Responsibilities include defining tenant isolation, building authorization models, and ensuring secure token systems.

The ideal candidate has over 8 years of backend engineering experience with a strong understanding of security in multi-tenant environments. This role emphasizes building resilient systems and raising the security standards across engineering.

Qualifications

• 8+ years of backend engineering experience.
• Proven experience building secure, multi-tenant SaaS platforms.
• Deep understanding of authorization models and security tradeoffs.

Responsibilities

• Define and enforce tenant isolation guarantees.
• Build and review authorization models.
• Own token systems for application security.
• Design APIs with secure patterns.

Skills

Backend engineering experience

Authorization models (RBAC, ABAC)

OAuth2 / JWT / API key systems

Threat modeling & security tradeoffs

System design skills

Job description

Role Summary

As a Staff Engineer on the Users team, you will be the technical anchor for identity, access, auditing, notifications and security foundations across our multi-tenant SaaS platform. This role is not about feature velocity - it’s about building systems that are correct, resilient, and safe by default, and enabling other teams to move fast without breaking trust.

You’ll work closely with EMs, Product, and other engineers to design and evolve core primitives such as users, roles, permissions, tokens, and tenant isolation, auditing, notifications - at scale.

Responsibilities

• Define and enforce tenant isolation guarantees at data, API, and infra levels
• Build and review authorization models (RBAC / ABAC / hybrid)
• Own token systems (API keys, OAuth flows, JWTs, scoped tokens, rotation, expiry)
• Design fine-grained scopes for internal APIs, public APIs, and partner integrations
• Prevent over-scoped tokens and privilege escalation
• Lead security‑critical backend designs (authZ boundaries, impersonation, auditability)
• Set patterns for secure‑by‑default APIs used by internal and external teams
• Partner with Infra/Security teams on Secrets management, Key rotation, Rate limiting & abuse prevention, Compliance readiness (SOC2 style thinking)
• Act as a multiplier: raise the security bar across engineering via reviews, RFCs, and mentoring

Requirements

• 8+ years of backend engineering experience
• Proven experience building secure, multi‑tenant SaaS platforms
• Deep understanding of: Authorization models (RBAC, ABAC), OAuth2 / JWT / API key systems, Threat modeling & security tradeoffs
• Strong system design skills - especially for long‑lived platformsComfort owning ambiguous, high‑impact areas

Nice to have

• Experience designing platforms used by multiple internal teams
• Security reviews, incident learnings, or compliance exposure
• Experience with large‑scale migrations (auth or identity related)
• Background in developer platforms or core infrastructure teams

EEO Statement

The company is an Equal Opportunity Employer. As an employer subject to affirmative action regulations, we invite you to voluntarily provide the following demographic information. This information is used solely for compliance with government recordkeeping, reporting, and other legal requirements. Providing this information is voluntary and refusal to do so will not affect your application status. This data will be kept separate from your application and will not be used in the hiring decision.