Staff Software Engineer

Kaseya; United States; Remote; USD 126,000 - 175,000; Full time

Job summary

Kaseya is seeking a hands-on Backend Platform Engineer to build and operate foundational services that connect workflow execution, identity, event routing, secrets, and audit capabilities. Proficiency in Go or Rust and a strong focus on security and traceability are required.

The role emphasizes event-driven architecture, tenant isolation, and reliable production operations. You will work on API gateways, identity integrations, and secure connectors while maintaining observability and incident

Qualifications

• Production backend development and operations experience with Go or Rust.
• Experience designing event-driven systems with Kafka or similar tools, including retries and idempotency.
• Experience implementing authentication and authorization with OAuth 2.0 or OIDC.
• Experience with encryption or key management (cloud KMS, envelope encryption, key hierarchy).
• Experience operating multi-tenant production systems with structured logs, metrics, tracing, and incident response.

Responsibilities

• Develop and operate platform services such as API gateways, event routing, identity integrations, secrets management, and audit infrastructure.
• Turn events, alerts, and partner webhooks into durable workflow execution using Kafka and a workflow orchestration system.
• Design key management for cloud KMS providers, customer-managed keys, envelope encryption, and per-tenant cryptographic isolation.
• Implement fine-grained permissions for tenants, workflows, operations, and service-to-service requests.
• Maintain GitOps deployment pipelines for versioned workflows and automate tenant onboarding, identity provisioning, compliance configuration, and key setup.
• Build secure third-party connectors with scoped access, request validation, managed credentials, and audit logging; improve observability, recovery, and incident readiness.

Skills

Backend development

Go or Rust

Event-driven systems

Authentication/Authorization

Multi-tenant production systems

Tools

Kafka

OAuth 2.0

KMS / encryption

Temporal (nice-to-have)

Job description

Role overview

Build and operate foundational backend platform services that connect workflow execution, identity, event routing, secrets, and audit capabilities. This hands-on role focuses on Go or Rust, event-driven architecture, tenant isolation, and reliable production operations, with careful attention to security, correctness, and traceability.

Responsibilities

• Develop and operate platform services such as API gateways, event routing, identity integrations, secrets management, and audit infrastructure.
• Turn events, alerts, and partner webhooks into durable workflow execution using Kafka and a workflow orchestration system.
• Design key management for cloud KMS providers, customer-managed keys, envelope encryption, and per-tenant cryptographic isolation.
• Implement fine-grained permissions for tenants, workflows, operations, and service-to-service requests.
• Maintain GitOps deployment pipelines for versioned workflows and automate tenant onboarding, identity provisioning, compliance configuration, and key setup.
• Build secure third-party connectors with scoped access, request validation, managed credentials, and audit logging; improve observability, recovery, and incident readiness.

Requirements

• Production backend development and operations experience with Go or Rust.
• Experience designing event-driven systems with Kafka or similar tools, including retries, idempotency, replay, and at-least-once delivery.
• Experience implementing authentication and authorization with OAuth 2.0, OIDC, token lifecycle management, or fine-grained access controls.
• Experience with encryption or key management, including cloud KMS, envelope encryption, or key hierarchy designs.
• Experience operating multi-tenant production systems with structured logs, metrics, distributed tracing, and incident response.

Nice to have

• Experience with Temporal or another durable workflow orchestration platform, and identity services such as Keycloak, Auth0, Okta, or similar.
• Familiarity with ClickHouse or another audit-focused data store; GitOps, CI/CD, Kubernetes, or infrastructure as code.
• Integrations with MSP, PSA, RMM, security, or Microsoft 365 APIs; regulated environments; or multi-cloud services across AWS, Azure, or GCP.

Benefits and work setup

• The source lists a base salary range of CAD $180,000–$250,000 per year. Individual pay depends on location, experience, skills, and other qualifications; some roles may include additional rewards or incentives.