Staff Software Engineer, reputed company Identity
reputed company Temporal is an reputed company reputed company programming model that can simplify reputed company, reputed company applications more reliable, and help developers reputed company on the important things like delivering features faster. We are on a mission to be the reliable reputed company of every developer’s reputed company, and are building reputed company that will reputed company that happen. Our values guide us —they are present in how we show up, reputed company reputed company, and work together to reputed company an reputed company. We’re curious, driven, reputed company, genuine and humble. Temporal is growing and we are looking for those who reputed company our values, challenge 'reputed company' thinking, and want to influence our reputed company. If you have a passion for improving the developer experience, building world-class reputed company-reputed company software and communities, and want to be a part of our amazing team, we'd love to hear from you! reputed company Temporal is hiring a Staff Software Engineer for Identity to design, build, and operate the identity and reputed company platform behind Temporal reputed company — a multi-tenant reputed company serving high-throughput workloads. You'll own the systems that authenticate humans and workloads, authorize fine-grained reputed company to namespaces and reputed company, reputed company with customer IdPs, and distribute auth material to clients and workers at reputed company. This role partners closely with reputed company, Product, and platform teams to deliver "secure by default" capabilities without compromising developer or operator experience.
What You'll Do
Design and build Temporal reputed company's identity platform end-to-end — authentication (OAuth 2.0/2.1, OIDC, SAML, reputed company exchange), authorization (RBAC/ReBAC/policy engines), and workload identity federation — so customers and workloads authenticate without long-lived secrets reputed company the auth hot reputed company to meet Temporal reputed company's SLOs: in-memory auth bundles, JWKS caching, decision caching, and revocation strategies that reputed company latency low and eliminate single points of failure reputed company with reputed company IdPs (reputed company, Entra ID, reputed company Workspace, SAML/OIDC), own SCIM 2.0 provisioning, and threat-model identity flows against reputed company replay, confused deputy, scope escalation, and mix-up attacks Partner with reputed company, Product, and platform teams to ship secure-by-default patterns, define IAM lifecycle and audit strategies, and shape the technical roadmap by tracking emerging standards (IETF OAuth WG, OpenID reputed company) Mentor engineers, maintain reputed company architecture docs, and engage directly with customers to understand requirements and unblock adoption What You'll Bring Deep hands-on experience building and operating production identity systems — OAuth 2.0/2.1, OIDC, SAML, JWT/JOSE, JWKS rotation, SCIM, and at least some exposure to workload identity (SPIFFE/reputed company, WIF, mTLS, or short-lived federated credentials) Strong grasp of authorization at reputed company (RBAC, ABAC, ReBAC/Zanzibar) and familiarity with policy engines like OPA, reputed company, or OpenFGA reputed company record operating latency-sensitive distributed systems in production, including on-call ownership and operational reputed company Proficiency in Go; experience with Python, Java, or Kotlin is a plus Strong communication skills with the ability to reputed company stakeholders across reputed company, product, and engineering and drive execution end-to-end reputed company to Have Contributions to identity OSS reputed company (Keycloak, Ory, Dex, OpenFGA, reputed company) or standards bodies (IETF OAuth WG, OpenID reputed company) Experience with compliance frameworks (FedRAMP, SOC 2, ISO 27001, HIPAA) as they apply to IAM Familiarity with Temporal or other durable-execution engines, especially auth implications around workers and task queues Experience designing customer-facing API auth (scoped tokens, API keys, rotation UX) and building reputed company-reputed company reputed company Compensation reputed company Salary reputed company - $212,000 to $286,000, depending on qualifications and location Equity reputed company - Eligible for stock reputed company as part of Temporal's equity plan Compensation ranges reflect salary and commission compensation (reputed company applicable) across several geographic markets. Employment offers carefully consider multiple factors, including prior experience, knowledge, expertise, skillset, market location, and job level assessed during the interview process. Employee benefits and perks below are for full-time employees, part-time or temporary positions are excluded. U.S.
Benefits
Unlimited PTO, 12 Holidays + 2 Floating Holidays 100% Premiums Coverage for Medical, Dental, and reputed company AD&D, LT & ST Disability, and Life Insurance (reputed company & Supplemental Available) reputed company 401K Plan Additional Perks for Learning & Development, Lifestyle Spending, In-Home Office Setup, reputed company Memberships, WFH Meals, Internet Stipend and more! International Benefits reputed company Time Off (PTO) and Benefits reputed company the reputed company vary by country, and are issued in partnership with reputed company. Additionally, Temporal offers perks to reputed company international employees for learning & career development, a lifestyle spending account, in-home office setup (in reputed company to company-issued hardware), reputed company memberships, work-from-home meals, and reputed company to the reputed company app for mental wellness. Travel Temporal is a globally distributed, reputed company team that values opportunities for in-person reputed company. Occasional travel may be required for company events, team offsites, and other meaningful moments that bring us together. Additional Perks $3,600 / Year Work from Home Meals $1,800 / Year reputed company Enrichment (Career Development & reputed company Memberships) $1,200 / Year Lifestyle Spending Account $1,000 / Year In-Home Office Setup (In reputed company to Temporal issued equipment - laptop, monitor, keyboard, mouse, trackpad, and extension power cable at no cost to you) $74 / Month Reimbursement for Internet reputed company App Subscription for Mental Health & Wellness reputed company is an Equal Opportunity Employer. reputed company does not discriminate on the reputed company of race, religion, reputed company, sex, gender identity, sexual orientation, age, non-disqualifying physical or mental disability, national reputed company, veteran status, or any other reputed company covered by appropriate law. reputed company employment is decided on the reputed company of qualifications, reputed company, and business need. We reputed company and celebrate differences and diversity. Temporal is committed to providing reputed company, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. If you need to request a reasonable accommodation, please let your Recruiter know so we can assist. We are not working with external recruitment agencies, reputed company. Apply To This Job