Senior Backend Engineer: Access & Authorization

Coinbase, Inc.; Montgomery (AL); Hybrid; USD 186,000 - 219,000; Full time

Benefits offered by this job

Remote-first culture

Equity eligibility

Medical benefits

Dental & Vision

401(k)

Job summary

Coinbase is seeking a Senior Software Engineer for the Access & Authorization team. You will shape authentication and authorization systems across Coinbase products, building secure, high-throughput services in Go and defining identity strategies for users and partners.

You will own design and implementation of OAuth, sessions, tokens, 2FA, and edge authorization while collaborating with product, security, fraud, and infrastructure teams to balance security with user experience.

Qualifications

• 5+ years of backend software engineering in production with Go or similar.
• Experience designing secure APIs, OAuth, OpenID Connect, JWTs, PKCE.
• Proficiency with gRPC and Redis or DynamoDB with observability.
• Track record delivering cross-functional projects with clear communication.
• Responsible use of AI with human oversight.

Responsibilities

• Own end-to-end design and operation of authentication and authorization capabilities.
• Build secure Go services with observability and SLOs.
• Lead designs for tokens, passkeys, and device-aware authentication.
• Collaborate with product, security, fraud, and infra teams to balance security and UX.
• Develop self-service tooling to scale access controls.
• Mentor engineers through reviews and on-call participation.

Skills

Go backend

OAuth/OIDC

gRPC/Protobuf

Distributed systems

Security focus

Cross-functional

Tools

Protocol Buffers

Redis

DynamoDB

Job description

Coinbase is seeking a Senior Software Engineer for the Access & Authorization team. You will shape authentication and authorization systems across Coinbase products, building secure, high-throughput services in Go and defining identity strategies for users and partners.

You will own design and implementation of OAuth, sessions, tokens, 2FA, and edge authorization while collaborating with product, security, fraud, and infrastructure teams to balance security with user experience.