Staff Software Engineer, Secure Access & Auth

Coinbase, Inc.; Columbus (OH); Hybrid; USD 218,000 - 257,000; Full time

Benefits offered by this job

Equity

Bonus eligibility

Medical, dental, vision

Job summary

Coinbase, Inc. is seeking a Staff Software Engineer for the Access & Authorization team to design and operate authentication and authorization capabilities across Coinbase products and partner integrations.

You will build secure, low-latency Go and gRPC services, lead complex designs like tokens and passkeys, and collaborate with security, product, and infra teams to balance security with user experience and regulatory needs.

Qualifications

• 8+ years of backend software engineering experience with Go or similar systems language.
• Experience designing secure APIs and token handling (OAuth 2.0, OpenID Connect, JWTs).
• Proficiency with gRPC, Protocol Buffers, and data stores (Redis, DynamoDB).
• Track record delivering cross-functional projects with clear communication.
• Responsible use of generative AI with human oversight.

Responsibilities

• Own end-to-end design and operation of authentication and authorization capabilities.
• Build secure, low-latency Go and gRPC services across products and partners.
• Lead technical designs for tokens, passkeys, biometric recovery, and device-aware auth.
• Partner with product, security, fraud, and infra teams balancing security, UX, and regulation.
• Simplify integration patterns and build self-service tooling for safe adoption at scale.
• Mentor engineers through reviews, pairing, and on-call participation.

Skills

Go backend

Distributed systems

API security

OAuth2/OpenID Connect

gRPC

Redis/DynamoDB

Observability & SRE basics

Cross-functional collaboration

Tools

Protocol Buffers

Redis

DynamoDB

Job description

Coinbase, Inc. is seeking a Staff Software Engineer for the Access & Authorization team to design and operate authentication and authorization capabilities across Coinbase products and partner integrations.

You will build secure, low-latency Go and gRPC services, lead complex designs like tokens and passkeys, and collaborate with security, product, and infra teams to balance security with user experience and regulatory needs.