Identity Engineer: Secure IAM & RBAC Platform (Equity)

Scale AI, Inc.; Washington (District of Columbia); On-site; USD 216,000 - 270,000; Full time

Benefits offered by this job

Equity-based compensation

Health, dental, vision

Retirement benefits

Learning and development stipend

Generous PTO

Commuter stipend

Job summary

Scale AI, Inc. is looking for an engineer to design and implement identity infrastructure handling secure authentication across enterprise systems. You will build SSO, MFA, and federated identity solutions (SAML, OAuth, OIDC) and craft robust authorization (RBAC/ReBAC/ABAC) with governance policies.

You will work across distributed cloud environments, applying best practices and security standards to ensure scalable, compliant identity management and collaboration with cross‑functional teams.

Qualifications

• 3+ years in engineering with infrastructure and identity focus.
• Experience with IAM controls, IaC, and microservice deployment best practices.
• Hands-on with OpenFGA, Authzed, Cedar, Topaz at scale.
• Knowledge of Zanzibar-style ReBAC models and access control.
• Familiar with OAuth 2.0, OIDC, SAML, JWT; IdP solutions like EntraID/Okta.
• Distributed systems on public clouds (AWS preferred) and independent ownership.
• Strong communication and collaboration skills for non-technical stakeholders.

Responsibilities

• Design and implement identity infrastructure for secure authentication across enterprise systems.
• Develop authentication mechanisms (SSO, MFA) and federated identity solutions (SAML, OAuth, OIDC).
• Build authorization (ReBAC, ABAC, RBAC) and identity governance policies.
• Ensure compliance with security policies and industry standards (NIST, SOC2, ISO 27001).
• Present technical concepts to teams and stakeholders and guide identity management best practices.

Skills

IAM expertise

OAuth 2.0

OIDC

Distributed systems

Strong communication

Tools

OpenFGA

Authzed

Cedar

Topaz

Terraform

Pulumi

EntraID

Okta

Job description

Scale AI, Inc. is looking for an engineer to design and implement identity infrastructure handling secure authentication across enterprise systems. You will build SSO, MFA, and federated identity solutions (SAML, OAuth, OIDC) and craft robust authorization (RBAC/ReBAC/ABAC) with governance policies.

You will work across distributed cloud environments, applying best practices and security standards to ensure scalable, compliant identity management and collaboration with cross‑functional teams.