Sr. Software Engineer - RBAC & Authorization

Description

The Access Control team sets up and enforces authorization across the company's cloud product. That covers the roles and permissions model, organization hierarchies, API key management, and the security boundaries that every product surface and customer tenant relies on.

The team recently shipped custom roles and fine-grained access and is now reworking the architecture to handle the largest enterprise customer structures.

Responsibilities

• Design and build the next version of the authorization model, including multi-level organization hierarchies, workspace isolation, and resource-scoped roles.
• Apply authorization checks consistently across all public and internal APIs.
• Create tooling and migration pipelines that change live authorization models without downtime or disruption to customers.
• Work with Product, Design, and Customer Identity teams to build permission management interfaces that feel smooth to use.

Requirements

• At least 6 years of experience building security platforms, access control engines, or core backend services at scale.
• Solid understanding of RBAC and ABAC policy models, fine-grained permission enforcement, multi-tenant isolation, API keys, and SAML/SSO.
• Strong TypeScript and Node.js skills, with good schema design in PostgreSQL or other relational stores.
• A record of running live customer data migrations and building systems where correctness is critical.
• Experience from enterprise identity platforms, IAM security tools, zero-trust cloud infrastructure, or core authorization teams at large B2B SaaS companies would be a strong fit.

Conditions

The company is globally distributed and remote-friendly, with operations in more than 25 countries.

Time off is flexible in the US and more generous in other countries.

The company is growing quickly and is at start-up stage.

Benefits

• The company contributes towards your healthcare costs.
• Every new team member receives stock options in the company.
• A home office setup allowance of USD$500 for remote employees.
• Opportunities to meet colleagues in person at company-wide offsites.