Senior Backend Engineer — Identity & Access Security

Coinbase, Inc.; Nashville (TN); Hybrid; USD 186,000 - 219,000; Full time

Job summary

Coinbase, Inc. is seeking a Senior Software Engineer in Access & Authorization to help shape authentication and authorization across our platform.

You will build secure, low-latency Go services and lead designs that balance strong security with a simple user experience across web, mobile, APIs, and partner integrations. You will own end-to-end capabilities including tokens, 2FA, edge authorization, and account recovery, while partnering with product, security, fraud and infrastructure teams to

Qualifications

• 5+ years backend software engineering with Go or similar
• Experience designing secure APIs, OAuth, OpenID Connect, JWTs
• Proficiency in gRPC, Protocol Buffers, Redis/DynamoDB
• Strong collaboration across product, security, and infra teams
• Responsible use of generative AI with human oversight

Responsibilities

• Own end-to-end design and operation of authentication, OAuth, sessions, tokens, 2FA and account recovery
• Build secure, low-latency Go services used across Coinbase platforms with observability and SLOs
• Lead technical designs for tokens, passkeys, biometric recovery, and mobile OAuth
• Collaborate with product, security, fraud and infra teams balancing CX and compliance
• Build self-service tooling for safe adoption of access/authorization features at scale
• Mentor engineers and contribute to design reviews and on-call rotations

Skills

Go

OAuth/OpenID

gRPC

Distributed systems

Security design

Tools

Redis

DynamoDB

Protocol Buffers

Job description

Coinbase, Inc. is seeking a Senior Software Engineer in Access & Authorization to help shape authentication and authorization across our platform.

You will build secure, low-latency Go services and lead designs that balance strong security with a simple user experience across web, mobile, APIs, and partner integrations. You will own end-to-end capabilities including tokens, 2FA, edge authorization, and account recovery, while partnering with product, security, fraud and infrastructure teams to