Staff Software Engineer: Identity & Authorization

delinea; United States; On-site; USD 180,000 - 280,000; Full time

Job summary

Delinea seeks a senior principal engineer to design core identity and authorization components for our AI security platform. You will model agent identities, delegated actions, and run-time access control across our systems.

You will set the technical direction and work with multiple teams to shape a scalable authorization framework. Reporting to the Director of Engineering, Securing AI, you will help select policy engines and define trust across external identity providers.

Qualifications

• Typically 10+ years of software engineering experience with deep expertise in identity, authorization, or distributed systems security.
• Hands-on experience building authorization or policy systems such as Cedar, OPA, OpenFGA, or comparable engine.
• Working knowledge of identity and token standards such as OAuth, OpenID Connect, SPIFFE/SPIRE, or workload identity federation.
• Track record of designing systems and interfaces that scale across teams.
• Ability to lead technical decisions spanning multiple teams and communicate them clearly.

Responsibilities

• Design the identity model for AI agents, including delegated actions and composite identities.
• Build the real-time authorization engine and select policy technology like Cedar/OPA/OpenFGA.
• Define trust for identities issued by platforms like Microsoft Entra and Salesforce and standards like OpenID Connect.
• Build authorization and continuous-evaluation capabilities using live session data and signals.
• Own interfaces and contracts across the platform and keep them clean as it grows.
• Act as a technical leader, setting direction and raising the bar on identity and authorization.

Skills

Identity model

Authorization engines

Distributed systems

OAuth/OpenID

Policy engines

Technical leadership

Tools

Cedar

OPA

OpenFGA

Job description

Delinea seeks a senior principal engineer to design core identity and authorization components for our AI security platform. You will model agent identities, delegated actions, and run-time access control across our systems.

You will set the technical direction and work with multiple teams to shape a scalable authorization framework. Reporting to the Director of Engineering, Securing AI, you will help select policy engines and define trust across external identity providers.