Senior IAM Engineer: Secure Auth & Access Platform

Brex; New York (NY); Hybrid; USD 192,000 - 240,000; Full time

Benefits offered by this job

Hybrid work environment

Remote work up to 4 weeks/year

Job summary

Brex in New York operates a hybrid work model combining in-office collaboration with remote flexibility. The Identity and Access Management team builds secure authentication and authorization services used by developers, customers, and partners.

You will lead projects to improve security, reliability, and developer experience across Brex’s identity platforms. The Senior Software Engineer role focuses on scoped initiatives like signed identity propagation, delegated and agent identity, deep

Qualifications

• 7+ years of professional experience designing, developing, and deploying applications.
• Strong software engineering fundamentals and experience building reliable production backend systems.
• Experience leading complex projects and mentoring other engineers.
• Clear API design fundamentals, rigor around testing, code quality, and documentation.
• Understanding IAM concepts like authentication, authorization, sessions, tokens, MFA, SSO, OAuth, SAML, OIDC, or RBAC.

Responsibilities

• Design, build, and operate backend systems and APIs for authentication, authorization, identity context, and audit-related workflows.
• Lead engineers on initiatives end to end, from technical design through rollout and support.
• Improve login and access experiences across SSO, MFA, step-up authentication, delegated access, and enterprise identity flows.
• Build and extend authorization systems that support custom roles and secure defaults for product teams.
• Help create durable, identity-aware audit trails and attribution for user and service actions.
• Partner with Brex engineers to make IAM integrations secure by default and easy to adopt.
• Mentor engineers to deliver high-quality code and improve reliability across the systems.

Skills

API design

Testing

Code quality

Documentation

IAM concepts

OAuth

SAML

OIDC

RBAC

Communication

Operational excellence

Security mindset

Tools

Okta

Oso

SSO

OAuth

OIDC

Job description

Brex in New York operates a hybrid work model combining in-office collaboration with remote flexibility. The Identity and Access Management team builds secure authentication and authorization services used by developers, customers, and partners.

You will lead projects to improve security, reliability, and developer experience across Brex’s identity platforms. The Senior Software Engineer role focuses on scoped initiatives like signed identity propagation, delegated and agent identity, deep