Senior IAM Architect - Scale AuthN/AuthZ & SSO (Remote)

DigitalOcean; Oregon; Hybrid; USD 141,000 - 176,000; Full time

Job summary

DigitalOcean is seeking a Senior Software Engineer (IC3) to join our Customer Trust & Engineering IAM team. You will architect the next generation of our Identity platform, enabling secure SSO, policy-driven access, and scalable auth for global customers.

You will lead complex IAM initiatives, drive security-first engineering across distributed systems, and mentor junior engineers while shaping multi-tenant data models and cloud-native architectures.

Qualifications

• 5+ years of software engineering experience, with 2+ years in Identity or high-scale distributed systems.
• Go expert with strong gRPC microservices knowledge.
• Deep knowledge of identity protocols (OIDC, OAuth2, SAML) and access control.
• Experience in cloud-native distributed systems at scale.
• Kubernetes, SQL/MySQL, and Terraform experience.
• Ability to communicate strategy to leadership and collaborate across teams.
• Ability to unwind legacy logic into clean abstractions.

Responsibilities

• Architect for Scale: design high-availability, low-latency authentication services in Go.
• Drive Next-Gen Innovation: support AI platforms with secure token exchange and context injection for agentic workflows.
• Modernize Identity: implement OIDC and SAML for seamless enterprise SSO.
• Solve Complex AuthZ: evolve policy engine with Rego/OPA for advanced permissions.
• Evolve Identity Models: design multi-tenant data models for enterprise needs.
• Operational Excellence: own reliability, Kubernetes deployments, and data pipelines modernization.
• Security First: remediate vulnerabilities and secure auth flows against threats.
• Mentor & Lead: provide deep code reviews and mentor junior engineers.

Skills

Go

gRPC

OIDC

OAuth2

SAML

RBAC

ABAC

PBAC

Kubernetes

MySQL

Terraform

Distributed systems

Job description

DigitalOcean is seeking a Senior Software Engineer (IC3) to join our Customer Trust & Engineering IAM team. You will architect the next generation of our Identity platform, enabling secure SSO, policy-driven access, and scalable auth for global customers.

You will lead complex IAM initiatives, drive security-first engineering across distributed systems, and mentor junior engineers while shaping multi-tenant data models and cloud-native architectures.