Staff Software Engineer, Access & Authorization (Remote)

Coinbase; Montgomery (AL); On-site; USD 218,000 - 257,000; Full time

Job summary

Coinbase is seeking a Senior Software Engineer for Access & Authorization to design and operate authentication and authorization capabilities across the platform. This role shapes how customers securely access Coinbase products, balancing security with a simple user experience.

You will build secure Go and gRPC services used across web, mobile, API, and partner experiences, with strong observability and SLOs. You will collaborate with product, security, fraud, and infra teams and mentor others.

Qualifications

• 8 years of backend software engineering experience with Go or a similar language.
• Experience designing secure APIs and handling authentication/authorization flows.
• Proficiency with gRPC, Protocol Buffers, and data stores like Redis/DynamoDB.
• Track record delivering cross-functional projects with clear communication.
• Uses AI responsibly with human oversight to improve workflows.

Responsibilities

• Own end-to-end design and operation of authentication, OAuth, sessions, tokens, 2FA, and edge authorization.
• Build secure, low-latency Go and gRPC services with observability and SLOs.
• Lead designs for signed tokens, passkeys, biometric recovery, and device-aware auth.
• Partner with product, security, fraud, and infra teams to balance needs and constraints.
• Simplify integration patterns and build self-service tooling for safe scale.
• Mentor engineers through design reviews, pairing, code reviews, and on-call.

Skills

Go

OAuth 2.0

OpenID Connect

JWTs

gRPC

Distributed systems

APIs design

Redis

DynamoDB

Security & auth

Tools

Protocol Buffers

Redis

DynamoDB

Job description

Coinbase is seeking a Senior Software Engineer for Access & Authorization to design and operate authentication and authorization capabilities across the platform. This role shapes how customers securely access Coinbase products, balancing security with a simple user experience.

You will build secure Go and gRPC services used across web, mobile, API, and partner experiences, with strong observability and SLOs. You will collaborate with product, security, fraud, and infra teams and mentor others.