Senior Backend Engineer- Users Infrastructure

Weave; Lehi (UT); On-site; USD 140,000 - 200,000; Full time

Job summary

Weave is seeking a Senior Backend Engineer to architect and scale the Identity and Access Management layer. You will lead authentication services for all entities and drive authorization across a large, multi-tenant customer base, leveraging Go, SpiceDB, and gRPC-based microservices.

You will own the internal SDKs, contracts, and middleware enabling many teams to integrate security features without cryptography expertise.

Qualifications

• 5+ years of backend engineering experience with distributed systems in Go.
• Deep understanding of AuthN/AuthZ primitives: OAuth 2.0, OIDC, SAML, and JWT mechanics.
• System design experience: distributed architectures and gRPC-based microservices.
• Excellent written communication for Technical Design Documents bridging multiple time zones.

Responsibilities

• Own the core Identity Lifecycle services for authenticating entities across the ecosystem.
• Define and enforce authorization strategies across multi-tenant organizations and locations.
• Develop internal SDKs, gRPC contracts, and middleware for 150+ downstream engineers.
• Improve observability and operational excellence of Tier-1 services.

Skills

Go

Distributed systems

Backend engineering

Tools

gRPC

OAuth 2.0

OIDC

JWT

SAML

Job description

At Weave (NYSE: WEAV), we’re on a mission to elevate the patient experience by giving healthcare practices the tools they need to run more efficiently and meaningfully connect with their patients. With 30,000+ customers and growing, Weave’s all-in-one platform supports every interaction from scheduling and payments to communication and reviews making it easier for healthcare professionals to focus on what matters most: patient care.As a Senior Backend Engineer on our Users Infrastructure team you'll join a high-trust, high-impact team helping to shape the future of healthcare technology. You will architect the foundational security and identity substrate that every Weave product depends on. You will lead the transition from legacy authorization to a modern, globally distributed Identity and Access Management (IAM) platform powered by SpiceDB and Go. This is a high-leverage role requiring a blend of secure backend engineering and the leadership maturity to grow a new regional hub for a Tier-1 infrastructure unit.You’ll thrive here if you care deeply about customers, lead with curiosity, and live by our core values: Think creatively. Stay hungry. Do the right thing. Care more. The customer is everything.If you're excited about transforming healthcare with purpose-driven work and smart teammates by your side, we'd love to meet you.This position will be remoteReports to: Manager of Engineering - Users Infrastructure

What You’ll Own

The Identity Lifecycle: You will own the core services responsible for authenticating every entity, human and machine, within the ecosystem. This includes managing the trade-offs between stateless scalability and real-time session revocation.

Authorization Strategy: You will be defining how fine-grained permissions are modeled, inherited, and enforced across a massive, multi-tenant hierarchy of organizations and locations.

The "Paved Road" for Developers: You will own the internal SDKs, gRPC contracts, and middleware that allow over 150+ downstream engineers to integrate security features into their products without needing to be cryptography experts.

Enterprise Integration Standards: You will manage the infrastructure that bridges our platform with the world, including federated identity (SSO), automated provisioning (SCIM), and secure machine-to-machine (M2M) communication protocols.

Operational Excellence: Improve system observability (MTTD/MTTR) by integrating monitoring and load-testing protocols into our Tier-1 services.

Systemic Integrity & Compliance: You are the guardian of the "Source of Truth." You will own the immutability and reliability of our audit logging pipelines and the consistency of identity data.

India Team Trajectory

As a founding member of the regional hub, you will own the technical bar and operational culture for the India-based arm of the team, ensuring seamless asynchronous collaboration with the US-based team members.

What You'll Need to Accomplish the Job

Experience: 5+ years of backend engineering with significant time spent building distributed systems in Go.

Domain Expertise (in any or all of these areas): Deep understanding of AuthN/AuthZ primitives: OAuth 2.0, OIDC, SAML, and JWT mechanics. System Design: Proven ability to manage complex data migrations, distributed architecture and build gRPC-based microservices. Communication: Exceptional written clarity; the ability to write Technical Design Documents (TPDs) that bridge the gap between India and US-based stakeholders.

What Will Make Us Love You

The "Founding" Spirit: You have previously been an early member of a distributed team and understand how to build culture across time zones.

Security Mindset: You treat "Zero-Trust" as a default, not a buzzword, and have experience with Zanzibar-style authorization or SpiceDB.

Reliability Obsession: You don't just ship code; you ship alerts, dashboards, and runbooks (and you have a "stop-and-fix" mentality).

Employment with Weave is contingent upon the successful completion of a background check, conducted in accordance with applicable laws.

At Weave, we use Artificial Intelligence (AI) tools to help us work more efficiently and create a smoother candidate experience. AI may assist with things like writing job descriptions, scheduling interviews, or reviewing applications against job-related criteria. For additional information, please review the External AI Policy Statement available on our Careers page.

Weave is an equal opportunity employer that is committed to fostering an inclusive workplace where all individuals are valued and supported. We welcome anyone who is hungry to learn, problem-solve and progress regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, or other applicable legally protected characteristics. If you have a disability or special need that requires accommodation, please let us know.

Beware of recruitment fraud. All official correspondence will occur through Weave branded email. We will never ask you to share bank account information, cash a check from us, or purchase software or equipment as part of your interview or hiring process.