Senior IAM Platform Architect - Remote

DigitalOcean; United States; Remote; USD 141,000 - 176,000; Full time

Benefits offered by this job

Equity compensation

Bonus potential

Remote-friendly

Job summary

DigitalOcean is seeking a Senior Software Engineer (IC3) to advance Identity and Access Management. You will architect scalable authentication/authorization services, drive secure token exchange, and implement federated SSO for global partners.

You’ll lead the policy engine development, handle multi-tenant data models, and guide distributed systems best practices while collaborating with cross-functional teams across DOKS, Billing, and Inference.

Qualifications

• 5+ years of software engineering experience with focus on.Identity/AuthN/AuthZ and security products.
• Expert-level Go and strong knowledge of gRPC microservices architecture.
• Deep knowledge of identity protocols (OIDC, OAuth2, SAML) and access control models (RBAC, ABAC, PBAC).
• Distributed systems expertise with cloud-scale design and implementation.
• Experience with Kubernetes, MySQL, Terraform; open policy tooling like OPA/Rego is a plus.

Responsibilities

• Architect for scalable, low-latency authentication/authorization services in Go.
• Lead foundations for cloud-native AI/ML platforms and secure token exchange patterns.
• Implement OIDC and SAML integrations for federated SSO across customers.
• Evolve the policy engine to support advanced permissions and dynamic scoping.
• Design multi-tenant data models for complex enterprise structures.
• Own reliability, Kubernetes deployments, and data pipelines modernization.
• Mentor engineers and conduct code reviews across distributed systems.

Skills

Go

gRPC

Identity protocols

RBAC

ABAC

PBAC

Distributed systems

Cloud-native

Security

Mentoring

Tools

Kubernetes

MySQL

Terraform

OPA

Rego

Job description

DigitalOcean is seeking a Senior Software Engineer (IC3) to advance Identity and Access Management. You will architect scalable authentication/authorization services, drive secure token exchange, and implement federated SSO for global partners.

You’ll lead the policy engine development, handle multi-tenant data models, and guide distributed systems best practices while collaborating with cross-functional teams across DOKS, Billing, and Inference.