Backend Engineer, Billing & IAM Platform

Thinking Machines Lab Inc.; San Francisco, Northern (CA, KY); Hybrid; USD 350,000 - 475,000; Full time

Benefits offered by this job

Health, dental, and vision benefits

Unlimited PTO

Paid parental leave

Relocation support

Job summary

Thinking Machines Lab Inc. is hiring a software engineer to own the Tinker platform systems—billing and usage metering, permissions and access control, organizations and teams, data exports, audit logging, and the admin surfaces that tie them together.

You will collaborate with product, legal, and enterprise teams to ship features across stacks, implement RBAC/ABAC and SSO, and ensure data residency and enterprise compliance.

Qualifications

• Bachelor’s degree or equivalent in computer science, engineering, or similar.

Responsibilities

• Design the authorization layer across all products: RBAC, API key scoping, organization hierarchies, and permission boundaries.
• Own billing infrastructure end to end, including usage metering and aggregation, plan management, payment processing, invoicing, and revenue recognition support.
• Build and evolve the organizations and teams model: seat management, SSO/SAML, workspace isolation, and invite flows.
• Implement data export and deletion pipelines that meet enterprise compliance and data residency requirements.
• Build audit logging so customers and internal teams have clear visibility into who did what, when.

Skills

Backend languages (Python or Rust)

IAM & auth (RBAC/ABAC, OAuth, SAML)

Multi-tenant architecture

Cross-functional collaboration

Shipping features across stacks

Education

Bachelor’s degree or equivalent in CS/Engineering

Tools

Billing systems

SSO/SCIM provisioning

Audit trails

Job description

Thinking Machines Lab Inc. is hiring a software engineer to own the Tinker platform systems—billing and usage metering, permissions and access control, organizations and teams, data exports, audit logging, and the admin surfaces that tie them together.

You will collaborate with product, legal, and enterprise teams to ship features across stacks, implement RBAC/ABAC and SSO, and ensure data residency and enterprise compliance.