Senior Backend Engineer, Identity & Access Management

Software powers the world, and LaunchDarkly empowers teams to deliver and control it safely. As a Senior Backend Engineer on the Identity & Access Management team, you will own the systems every customer touches before they touch anything else: SAML and OAuth2 single sign-on, SCIM user and team provisioning, login and session management, multi-factor authentication, and the API key and token infrastructure that authenticates every request to our platform. When authentication is wrong, customers cannot get in at all — or the wrong person gets in. Security and availability here are commitments to our customers, not nice-to-haves. You and your team will make this stack operable and enterprise-ready. Technologies include Go, TypeScript, CockroachDB, Redis, AWS, and Terraform. Exact tool match matters far less than deep backend judgment and a track record of safely changing systems that are not allowed to be wrong.

Responsibilities

Own LaunchDarkly’s authentication surface end to end — single sign-on, SCIM provisioning, login and session flows, multi-factor authentication, and API key and token authentication; Build the enterprise identity capabilities our largest customers require: additional identity-provider integrations, support for multiple IdPs per account, and MFA enforcement by default; Make the stack operable: SLOs, monitoring for certificate expiry and provisioning failures, actionable alerting, runbooks, and a sustainable on-call; Partner with Product Security on threat modeling, audit logging, and compliance requirements including SOC 2 and FedRAMP; Set the technical direction for identity at LaunchDarkly, and raise the bar for the engineers around you through design review and mentorship.

Requirements

6+ years of professional software-engineering experience, with significant work on complex backend applications; Experience building or operating production authentication and identity systems; A track record on systems where correctness and availability are non-negotiable, and the habits that come with it: backward-compatible change, staged rollouts, and safe cutovers; Proficiency in at least one backend language (Go, Rust, Python, etc.) and familiarity with cloud infrastructure (AWS or equivalent), plus strong production ownership including on-call.

Nice to have

Protocol depth in SAML, OIDC/OAuth2, or SCIM, and integration experience with Okta, Microsoft Entra ID, Google Workspace, OneLogin, or Ping; MFA/WebAuthn, RBAC and authorization policy engines, or audit logging at multi-tenant scale; Engineering under compliance regimes such as SOC 2 or FedRAMP

Benefits

Restricted Stock Units (RSUs); health insurance; vision insurance; dental insurance; mental health benefits