Staff Software Engineer - Enterprise Identity & Security

Jobicy; United States; Remote; USD 180,000 - 240,000; Full time

Job summary

Kong Inc. is seeking a Staff Software Engineer for the Konnect team to architect Kong Identity’s multi-tenant platform, balancing complex hierarchies, isolation, and enterprise security. You’ll shape token systems, gateway integrations, and policy-driven identity services at scale.

Ideal candidates bring 7+ years building production identity platforms, deep OAuth/OpenID expertise, and a track record delivering secure, low-latency auth globally.

Qualifications

• Proficient in advanced OAuth 2.0 extensions (PKCE, mTLS, JWT bearer assertions, token exchange).
• Strong experience with OpenID Connect profiles and evolving standards.
• Proven ability to design multi-tenant identity platforms with complex isolation.

Responsibilities

• Design and implement token management systems and real-time revocation capabilities.
• Lead development of extensible claims engine with dynamic attribute resolution.
• Architect global identity infrastructure with edge optimization and cross-region replication.
• Design rate limiting, anomaly detection, and fraud prevention for credential abuse.
• Build enterprise identity federation capabilities including SAML bridge patterns.
• Lead technical strategy for developer experience: SDKs, webhooks, and analytics dashboards.
• Architect client management with dynamic registration and credential rotation.
• Enable plugin architecture for custom grant flows and protocol extensions.
• Drive compliance efforts (SOC 2, FedRAMP, GDPR) with audit trails and data residency controls.
• Collaborate on observability integration with distributed tracing and security events.

Skills

OAuth 2.0 extensions

OpenID Connect

Multi-tenant identity

Edge deployment

Security auditing

Tools

HSM integration

Job description

Kong Inc. is seeking a Staff Software Engineer for the Konnect team to architect Kong Identity’s multi-tenant platform, balancing complex hierarchies, isolation, and enterprise security. You’ll shape token systems, gateway integrations, and policy-driven identity services at scale.

Ideal candidates bring 7+ years building production identity platforms, deep OAuth/OpenID expertise, and a track record delivering secure, low-latency auth globally.