Principal Engineer, Customer Identity Platform Engineering

ResMed; San Diego (CA); On-site; USD 190,000 - 240,000; Full time

Job summary

An innovative firm is seeking a Principal Engineer for Identity Platform Engineering, focusing on building a secure and user-friendly customer identity platform. This role involves creating architectural blueprints, implementing comprehensive security designs, and developing robust authentication and authorization modules. You'll work in a dynamic environment, collaborating with teams to enhance digital experiences and drive technological advancements. If you're passionate about system design and eager to make a significant impact, this position offers a unique opportunity to shape the future of connected care while enjoying a supportive and inclusive workplace culture.

Benefits

Comprehensive medical, vision, and dental insurance

401(k) plan

Employee Stock Purchase Plan (ESPP)

Tuition assistance

Paid Time Off (PTO)

Flexible Spending Account (FSA)

Health Savings Account (HSA)

Commuter benefits

Employee Assistance Program (EAP)

Short-term and long-term disability insurance

Qualifications

• 15+ years managing SaaS applications with deep IAM knowledge.
• Hands-on experience in distributed systems and cloud platforms.

Responsibilities

• Design and document the architecture of the customer identity platform.
• Implement security strategies and ensure compliance with regulations.

Skills

Identity & Access Management (IAM)

System Design and Architecture

Data Analysis and Visualization

API Development

Security Policies and Compliance

Distributed Systems

Cloud Platforms (AWS/GCP)

Kubernetes/Container Development

Education

Bachelor's degree in Computer Science or Computer Engineering

Tools

REST APIs

GraphQL

OAuth 2.0

OpenID Connect

SAML

Job description

Digital Health Technology team powers digital experiences and engagement to enhance the lives of millions of people every day through connected care. We build, deliver and manage a portfolio of data management platforms and mobile offerings in support of our core businesses. We thrive on simple and elegant architecture and agility. You’ll be immersed in a dynamic high-growth environment and empowered to excel, take informed risks, and drive ingenuity across the enterprise.

The Global Technology Services organization powers digital experiences and engagement to enhance the lives of millions of people every day through connected care. We build, deliver, and manage a portfolio of data management platforms and mobile offerings supporting our core businesses. We thrive on simple and elegant architecture and agility. You’ll be immersed in a dynamic high-growth environment and empowered to excel, take informed risks, and drive ingenuity across the enterprise.

Let’s talk about the team and you:

The Digital Platform Engineering team is focused on building world-class platforms in the cloud, with capabilities and processes that enable our engineers to focus on delivering innovative customer-facing features. Our digital platform comprises of company-wide engineering capabilities like Data Platform, AI Platform, Customer Identity Platform, DevX platform etc. and serves a variety of internal and external developers and services by creating secured paved roads for our cloud assets, building fully automated CICD pipelines, and enabling fast experimentation for our data science services.

As a Principal Engineer of Identity Platform Engineering at ResMed, you will enable ResMed to securely and seamlessly manage customer identities by providing a robust, scalable, and user-friendly platform that ensures the privacy, security, and trust of customer data. A Principal Engineer building a customer identity platform has a critical role in ensuring the system is secure, scalable, and user-friendly. If you are hands on, passionate about system design and architecture, data-driven decision making and developing platform products, this job is for you!

Here are the key deliverables typically expected:

1. Architectural Blueprint: Architecture and documentation that outlines the components of the customer identity platform. This includes the overall structure of the system, including authentication, authorization, user management, data flow, integration points, and security layers.
2. Security Design & Policies: Comprehensive security strategy and implementation plan covering secure data storage, encryption (at rest and in transit), multi-factor authentication (MFA), session management, identity proofing, and compliance with standards like GDPR, CCPA, or HIPAA.
3. Authentication & Authorization Module: A robust authentication (AuthN) and authorization (AuthZ) module that supports various login methods (e.g., social login, SSO, passwordless). Integrating protocols like OAuth 2.0, OpenID Connect, and SAML for authentication. Role-based or attribute-based access control for authorization.
4. API & SDKs for Identity Management: Well-documented APIs and SDKs that enable other teams or external partners to interact with the identity platform. REST or GraphQL APIs for account creation, login, password resets, access control, and token management.
5. Data Migration & User Onboarding Strategy: A strategy for migrating existing user data (if applicable) to the new platform and onboarding new users.
6. Performance & Scalability Strategy: Detailed performance benchmarks and scalability planning to ensure the platform can handle high concurrency, large user volumes, and peak traffic loads without performance degradation.
7. Compliance & Auditing Tools: Tools and features that ensure compliance with industry regulations and internal policies.
8. Monitoring, Alerting & Incident Response: Documentation & Knowledge Sharing. Technical documentation for developers, onboarding guides for users, and architecture and design documents for stakeholders.
9. Testing & Quality Assurance: A test suite that includes unit tests, integration tests, and security tests.
10. Roadmap for Future Enhancements: A strategic roadmap for platform enhancements and continuous improvement.

Business Acumen: Understanding of the business goals and the ability to align technology solutions with strategic objectives.

Communication and Collaboration: Excellent communication skills: Demonstrated ability to explain complex technical issues to both technical and non-technical audiences.

Action Oriented: Driven, motivated team player with a Get Stuff Done mentality!

Let’s talk about Qualifications and Experience:

• Bachelor’s degree in Computer Science or Computer Engineering or equivalent combined education and experience.
• 15+ years managing and operating SaaS applications in production environments. Deep Knowledge of Identity & Access Management (IAM). Expertise in IAM protocols, technologies, and best practices.
• Experience with APIs and 3rd-party API adoption. Hands-on ability to demonstrate what good looks like.
• Strong technical abilities with experience in distributed systems design and scale.
• Work experience in two or more of: Unix/Linux, Distributed Systems, AWS/GCP, Kubernetes/Container platforms-based software development.
• Have extensive experience with metrics and logging libraries and aggregators, data analysis and visualization tools.
• Record of improving your team through your leadership and mentoring. Helping the team see their path for growth.

If you’re looking for an environment where you can continue to develop your craft, explore new technologies, and have a larger contribution, we’d love to chat with you!

We are shaping the future at ResMed, and we recognize the need to build on and broaden our existing skills and continue to attract and retain the world’s best talent. We work hard to offer holistic benefits packages, provide flexible work arrangements, cultivate a workforce culture that allows employees to grow personally and professionally, and deliver competitive salaries to our team members. Employees scheduled to work 30 or more hours per week are eligible for benefits.

This position qualifies for the following benefits package: comprehensive medical, vision, dental, and life, AD&D, short-term and long-term disability insurance, sleep care management, Health Savings Account (HSA), Flexible Spending Account (FSA), commuter benefits, 401(k), Employee Stock Purchase Plan (ESPP), Employee Assistance Program (EAP), and tuition assistance. Employees receive fifteen days Paid Time Off (PTO) in their first year of employment, receive 11 paid holidays plus 3 floating days and are eligible for 14 weeks of primary caregiver or two weeks of secondary caregiver leave when welcoming new family members.

Individual pay decisions are based on a variety of factors, such as the candidate’s geographic work location, relevant qualifications, work experience, and skills.

At ResMed, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current base range for this position is: $190,000 - $240,000 USD.

Joining us is more than saying “yes” to making the world a healthier place. It’s discovering a career that’s challenging, supportive and inspiring. Where a culture driven by excellence helps you not only meet your goals but also create new ones. We focus on creating a diverse and inclusive culture, encouraging individual expression in the workplace and thrive on the innovative ideas this generates. If this sounds like the workplace for you, apply now! We commit to respond to every applicant.