Senior Backend IAM Engineer — SSO, MFA & API Security

Alion; Kentucky; On-site; USD 163,000 - 224,000; Full time

Benefits offered by this job

RSUs

Health insurance

Vision and dental

Mental health benefits

Job summary

LaunchDarkly is hiring a Senior Backend Engineer for the Identity & Access Management team in the United States. You will own authentication surfaces, including SSO, SCIM provisioning, login and session flows, MFA, and API key/token auth, ensuring enterprise-grade security and reliability.

You will implement enterprise identity capabilities, support multiple IdPs per account, and enforce MFA by default, while maintaining operability through monitoring, on-call readiness, and compliance with SOC

Qualifications

• 6+ years of professional software-engineering experience on complex backend apps.
• Experience building/operating production authentication and identity systems.
• Track record of high correctness and availability with safe rollout practices.
• Proficiency in at least one backend language (Go, Rust, Python, etc.) and cloud familiarity (AWS).

Responsibilities

• Own authentication surface end to end: SSO, SCIM provisioning, login flows, MFA, and API key/token auth.
• Build enterprise identity capabilities: multiple IdP integrations and MFA enforcement.
• Make the stack operable: monitoring, alerting, on-call readiness, and runbooks.
• Partner with Product Security on threat modeling, audit logging, and SOC 2/FedRAMP compliance.
• Set technical direction for identity and mentor engineers via design reviews.

Skills

Backend engineering

Authentication systems

Go

Rust

Python

AWS

Tools

CockroachDB

Redis

Terraform

AWS

Job description

LaunchDarkly is hiring a Senior Backend Engineer for the Identity & Access Management team in the United States. You will own authentication surfaces, including SSO, SCIM provisioning, login and session flows, MFA, and API key/token auth, ensuring enterprise-grade security and reliability.

You will implement enterprise identity capabilities, support multiple IdPs per account, and enforce MFA by default, while maintaining operability through monitoring, on-call readiness, and compliance with SOC