Staff Software Engineer- IAM

Qualifications Direct experience implementing or operating Zitadel or similar in a production environment. Experience integrating IAM platforms with enterprise identity providers including Microsoft Entra ID, Okta, Google Workspace, Ping Identity, and Active Directory. Experience with policy engines and policy-as-code frameworks such as Open Policy Agent (OPA), Cedar, or similar technologies. Experience with machine identity lifecycle management, secrets management, certificate management, and workload identities. Experience designing audit, compliance, governance, and entitlement review systems. Familiarity with compliance frameworks such as SOC 2, ISO 27001, HIPAA, PCI-DSS, NIST, or FedRAMP.

Responsibilities: Technical Leadership Define the long-term architecture and technical roadmap for the IAM platform. Lead identity, authentication, authorization, and access governance initiatives spanning multiple products and engineering teams. Establish standards, reference architectures, and best practices for identity and access management across the organization. Drive platform adoption and migration strategies for existing products and services. Hands-On Engineering Design, implement, and operate core IAM platform services. Build integrations between identity providers, API gateways, authorization systems, secrets management platforms, and SaaS products. Develop services supporting user lifecycle management, machine identity management, delegated administration, access reviews, and compliance reporting. Implement secure token exchange, service-to-service authentication, and federated identity workflows. Build APIs, automation, and self-service capabilities for onboarding, provisioning, and access governance. Troubleshoot and resolve complex scalability, reliability, and security challenges across the platform. Security & Governance Design authorization models supporting RBAC, ABAC, delegated administration, and multi-tenant environments. Define controls for least privilege, separation of duties, credential management, and privilege escalation prevention. Ensure complete auditability of access grants, modifications, reviews, and revocations. Partner with security and compliance teams to meet regulatory and customer

requirements. Additional information Kaseya provides equal employment opportunity to all employees and applicants without regard to race, religion, age, ancestry, gender, sex, sexual orientation, national origin, citizenship status, physical or mental disability, veteran status, marital status, or any other characteristic protected by applicable law.

A meeting lands on your calendar

If they’re a yes, I book the chat. You show up — that’s the whole job-hunt.