Senior Remote-First Backend Engineer, Access & Authorization

Coinbase, Inc.; Madison (WI); Hybrid; USD 186,000 - 219,000; Full time

Benefits offered by this job

Medical, dental, vision

401(k)

Job summary

Coinbase, Inc. is hiring a Senior Software Engineer for the Access & Authorization team in the Platform group.

You will shape authentication and authorization capabilities across Coinbase products and partner integrations, balancing security with a seamless user experience. You will design and operate highly secure, low-latency services using Go and gRPC, with strong observability, SLOs, and production readiness.

Qualifications

• 5+ years of backend software engineering with Go or similar systems language.
• Experience designing secure APIs and handling OAuth, tokens, and sessions.
• Proficiency with gRPC, Protobufs, and data stores like Redis/DynamoDB; strong observability.

Responsibilities

• Own end-to-end design, implementation, and operation of authentication, OAuth, sessions, and 2FA systems.
• Build secure, low-latency Go and gRPC services across Coinbase platforms with strong observability and SLOs.
• Lead technical designs for initiatives like signed tokens, passkeys, device-aware auth, and mobile OAuth.
• Collaborate with product, security, fraud, and infra teams to balance security and user experience.
• Create self-service tooling to scale access and authorization capabilities.
• Mentor engineers through design reviews, pairing, code reviews, and on-call participation.

Skills

Go

Distributed systems

OAuth 2.0

OpenID Connect

JWTs

gRPC

Protobufs

Security design

CI/CD

Tools

Redis

DynamoDB

Metrics/Logging/Tracing

Observability tooling

Go tooling

Job description

Coinbase, Inc. is hiring a Senior Software Engineer for the Access & Authorization team in the Platform group.

You will shape authentication and authorization capabilities across Coinbase products and partner integrations, balancing security with a seamless user experience. You will design and operate highly secure, low-latency services using Go and gRPC, with strong observability, SLOs, and production readiness.