Software Engineer, Identity Infrastructure

Description

The Identity Infrastructure Engineering team builds the identity and access systems that the company's researchers, engineers and internal teams depend on to protect critical systems and data.

The team works with Research, Applied Engineering, Infrastructure, IT and Security to make secure access workable across cloud and internal environments.

The role is for a hands-on software engineer who will design and build high-scale, high-throughput secure access proxies and the distributed systems behind them. These are tier-zero services that researchers, engineers and agents rely on to reach critical infrastructure safely and reliably.

The work sits where networking, distributed systems and infrastructure security meet. You will build the serving paths and control-plane integrations that connect identities to resources. Teleport is a core part of the current platform, and the role also covers credential brokers, policy enforcement and developer-facing integrations.

You will own your services from design and implementation through production. This means understanding human, agent and workload traffic, improving throughput and tail latency, keeping authorization decisions auditable, and designing for safe multi-region rollout and recovery. The team wants someone who can turn a demanding security requirement into software that performs at scale and is easy for other engineers to use.

The company is an AI research and deployment company focused on making general-purpose AI benefit all of humanity, and it ships its systems through its products.

Equal opportunity: the company does not discriminate on the basis of any legally protected characteristic. Details are in its Affirmative Action and Equal Employment Opportunity Policy Statement.

Responsibilities

• Design and build secure access proxies, gateways and credential brokers that give narrowly scoped, auditable access to infrastructure and internal services, and reduce standing privileges.
• Connect identity and access policy across clients, proxies and target systems so approved permissions take effect quickly, and access expires or is revoked when required. Handle stale policy and active sessions correctly.
• Build observability that shows the full access path: latency, errors, saturation, authorization decisions and identity attribution, without exposing credentials.
• Engineer multi-region rollouts, canaries, rollback, failover and recovery. Validate changes with realistic test environments, load tests and failure tests.
• Keep core access services reliable, fast and maintainable. Own production support, maintenance, upgrades and incident recovery, and ship lasting fixes that cut repeat failures, alert noise and manual work.
• Make secure access simple to adopt through reusable APIs, client tooling, diagnostics and self-service workflows. Lead migrations that keep critical workflows working, with tested rollback and recovery paths and clear ownership across Infrastructure, Security and SRE.

Requirements

• You have built and run production backend, proxy, networking or infrastructure services with demanding scale or availability needs.
• You have working networking knowledge of HTTP, TCP, TLS, DNS, routing and load balancing across real request paths.
• You can describe how you handled a performance bottleneck, partial failure, multi-region deployment or a difficult production change in a system you built yourself.
• You understand authentication, authorization, least privilege, trust boundaries, credential handling and the impact of an access-control failure.
• You have strong software engineering fundamentals and experience with Go, Rust, Python or a similar language.
• You use tests, profiling, telemetry and reproducible experiments to debug across system boundaries and verify correctness, performance and recovery.
• You make practical scope decisions, explain tradeoffs clearly and follow work from code through to production.
• Teleport or a comparable access platform is helpful but not required. Strong engineering and production ownership count for more than knowing every tool.

Conditions

Equal opportunity: the company does not discriminate on the basis of any legally protected characteristic.