Staff IAM Architect — Global Identity & Token Systems

Kong; United States; Remote; USD 150,000 - 210,000; Full time

Job summary

Kong is building the future of API management for developers. As a Staff Software Engineer on the Konnect team, you’ll architect Kong Identity's multi-tenant identity platform, supporting complex hierarchies and enterprise-grade security controls.

You’ll design and implement advanced token management, lead the claims engine, and drive global identity infrastructure with edge optimization and cross-region replication to deliver sub-millisecond authentication latency worldwide.

Qualifications

• 7+ years of experience building production identity platforms at leading identity providers or enterprise software companies.
• Deep expertise in OAuth 2.0 extensions (PKCE, mTLS, JWT bearer).

Responsibilities

• Design and implement advanced token management systems.
• Lead development of Kong Identity's extensible claims engine.
• Architect global identity infrastructure with edge optimization and cross-region replication.
• Design sophisticated rate limiting, anomaly detection, and fraud prevention systems.
• Build enterprise identity federation capabilities, including SAML bridge patterns.
• Lead technical strategy for Kong Identity's developer experience, including SDKs, webhooks, audit logging, and real-time analytics dashboards.

Skills

Production identity platforms

OAuth 2.0 extensions

PKCE

mTLS

JWT bearer

Job description

Kong is building the future of API management for developers. As a Staff Software Engineer on the Konnect team, you’ll architect Kong Identity's multi-tenant identity platform, supporting complex hierarchies and enterprise-grade security controls.

You’ll design and implement advanced token management, lead the claims engine, and drive global identity infrastructure with edge optimization and cross-region replication to deliver sub-millisecond authentication latency worldwide.