Backend Engineer, Enterprise Identity & Permissions Platform

BranchFactor; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

BranchFactor is seeking an experienced backend/platform engineer to join the Enterprise Trust & Governance team. The role focuses on building a robust control plane for identity, provisioning, and governance across enterprise deployments.

You will own end-to-end platform capabilities, from policy models to admin experiences, with emphasis on multi-tenant security, telemetry, and scalable API design. Collaboration with product, design, security, and customer success is essential.

Qualifications

• 4+ years of software engineering experience with ownership of backend systems from design through production

Responsibilities

• Own enterprise identity and provisioning including SSO (SAML/OIDC) and SCIM
• Build the permissions platform with fine-grained roles for connectors, tools, models
• Design and ship secure, well-documented admin APIs for audit logs, members, groups, roles, and settings
• Build policy controls for model availability, staged rollouts, usage and spend limits
• Build admin-facing analytics for adoption, usage, spend, and policy enforcement
• Deliver audit logs and change notifications for admin investigators and compliance
• Set the technical bar for authorization correctness and tenant isolation
• Partner with Product, Design, Security, Sales, and Customer Success to translate enterprise requirements into reusable platform capabilities

Skills

Backend systems design

Multi-tenant SaaS

Security-conscious design

Mentorship & leadership

Cross-team collaboration

Tools

Python

Go

Rust

AWS

Kubernetes

Job description

BranchFactor is seeking an experienced backend/platform engineer to join the Enterprise Trust & Governance team. The role focuses on building a robust control plane for identity, provisioning, and governance across enterprise deployments.

You will own end-to-end platform capabilities, from policy models to admin experiences, with emphasis on multi-tenant security, telemetry, and scalable API design. Collaboration with product, design, security, and customer success is essential.