Senior IAM Architect: Federation, MFA & Secure Auth

GoFundMe; San Francisco (CA); On-site; USD 233,500 - 321,200; Full time

Benefits offered by this job

Competitive pay

Comprehensive healthcare

401(k) saving program

Job summary

GoFundMe is seeking a Senior Staff Software Engineer for Identity & Access Management to own the IAM platform that serves consumer and enterprise surfaces. You will shape authentication, authorization, and provisioning patterns, balancing security with usability across front doors.

You will lead architectural decisions for federation, SSO, MFA, and policy enforcement, while mentoring teammates and coordinating with Risk, Payments, Security, and Integrity stakeholders to enable trusted access at

Qualifications

• 8+ years of software engineering, with senior to principal level on platform or infrastructure systems.
• Deep identity protocols: OAuth 2.x, OpenID Connect, SAML 2.0, SCIM.
• Designed IAM or auth platforms used by multiple teams in production at scale.
• Enterprise identity at scale: SSO, SCIM provisioning, multi-tenant trust, IdP heterogeneity.

Responsibilities

• Define and evolve end-to-end IAM architecture across authentication, authorization, session management, and token lifecycle.
• Own enterprise identity onboarding for nonprofit customers: SSO, SCIM provisioning, multi-tenant trust patterns.
• Architect federation and provisioning patterns (OIDC, SAML 2.0, SCIM) for diverse IdP configurations.
• Make build-vs-integrate decisions across Descope, Auth0, Okta and in-house systems.
• Design and operate MFA orchestration and step-up authentication flows with risk signals.
• Own the consumer identity platform (Descope CIAM, session management, passwordless, social login).
• Establish policy enforcement architecture (PEP, PAP) and runtime enforcement across surfaces.
• Own the IAM technical roadmap and collaborate with stakeholders across the company.
• Partner with Identity & Risk Intelligence, Payments, Security, Integrity teams as the IAM interface.
• Mentor engineers across Identity team and Platform Tribe.

Skills

IAM architecture

OAuth 2.0 / OIDC

Federation & provisioning

Security & risk

Observability

Mentoring

Cloud platforms

Tools

Descope

Auth0

Okta

Ping Identity

Job description

GoFundMe is seeking a Senior Staff Software Engineer for Identity & Access Management to own the IAM platform that serves consumer and enterprise surfaces. You will shape authentication, authorization, and provisioning patterns, balancing security with usability across front doors.

You will lead architectural decisions for federation, SSO, MFA, and policy enforcement, while mentoring teammates and coordinating with Risk, Payments, Security, and Integrity stakeholders to enable trusted access at