Senior Software Engineer, Identity & Access
- Role
- Backend
- Experience
- Senior
- Employment
- Full-time
Open to US only. Set where you work from to check your eligibility.
Core skills
Required skills
Optional skills
ABOUT THE COMPANY
StackAI (by Asana) is a no-code AI workflow platform that empowers companies to build, deploy, and scale AI-powered workflows easily. With thousands of users and rapidly growing enterprise adoption, our mission is to democratize access to LLMs and bring AI into the hands of every business operator, not just developers. An Asana Company, we're building the foundational platform for the AI-driven future of work
THE ROLE
Every large enterprise that adopts StackAI needs to control precisely who can do what, on whose behalf, across their whole organization. We're hiring a Senior Software Engineer, Identity & Access to build the access layer that makes that possible: the authentication, authorization, and access control that let our largest and most regulated customers adopt StackAI with confidence.
This is foundational work for enterprise adoption. Strong identity is what lets a large organization roll StackAI out across many teams, and lets their administrators manage all of it cleanly. You'll own that layer across the platform, from sign-on to fine-grained permissions.
WHAT YOU'LL DO
- Own enterprise sign-on. Deliver SSO across OIDC and SAML so customers onboard with their own identity provider.
- Own authorization and RBAC. Build role-based access control with fine-grained, query-time enforcement across the product.
- Own provisioning and lifecycle. Deliver SCIM provisioning and directory sync so user and group management stays in step with the customer's directory.
- Own delegated and machine identity. Build token exchange, on-behalf-of flows, service accounts, and domain-wide delegation so agents and services act with scoped authority.
- Own access governance. Build the entitlements, session and token management, and controls that keep access clean and auditable at scale.
WHAT WE'RE LOOKING FOR
- 4+ years building backend systems, with significant time spent on identity, authentication, or authorization.
- Real depth in OIDC, OAuth2, SAML, token exchange, and multi-tenant RBAC.
- You've built or owned enterprise SSO and identity systems, with a strong grasp of identity-provider architecture and enterprise auth patterns.
- Strong in Python and modern backend frameworks (FastAPI or similar).
- You care about clean, well-architected access control and the experience of the administrators who manage it.
Identity is broad. If you're strong on most of this and excited to grow into the rest, we'd like to hear from you, even if you don't check every box.
BONUS POINTS
- SCIM and directory sync at scale.
- Authorization frameworks and policy engines (OPA, Cedar, or Zanzibar-style systems).
- Entitlements, usage-based metering, or billing systems.
- Multi-tenant SaaS at scale.
- Startup or growth-stage experience.
WHY STACKAI
You'll join a lean, high-impact team and own the access layer that lets the largest enterprises adopt Stack AI. Your work ships fast and is felt across the whole product.
StackAI is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.
What you'll do
- Own enterprise sign-on. Deliver SSO across OIDC and SAML so customers onboard with their own identity provider.
- Own authorization and RBAC. Build role-based access control with fine-grained, query-time enforcement across the product.
- Own provisioning and lifecycle. Deliver SCIM provisioning and directory sync so user and group management stays in step with the customer's directory.
- Own delegated and machine identity. Build token exchange, on-behalf-of flows, service accounts, and domain-wide delegation so agents and services act with scoped authority.
- Own access governance. Build the entitlements, session and token management, and controls that keep access clean and auditable at scale.
What they require
- 4+ years building backend systems, with significant time spent on identity, authentication, or authorization.
- Real depth in OIDC, OAuth2, SAML, token exchange, and multi-tenant RBAC.
- You've built or owned enterprise SSO and identity systems, with a strong grasp of identity-provider architecture and enterprise auth patterns.
- Strong in Python and modern backend frameworks (FastAPI or similar).
- You care about clean, well-architected access control and the experience of the administrators who manage it.
Benefits
- You'll join a lean, high-impact team and own the access layer that lets the largest enterprises adopt Stack AI.
- Your work ships fast and is felt across the whole product.
Stack AI is a no-code drag-and-drop tool to quickly design, test, and deploy AI workflows that leverage Large Language Models (LLMs), such as ChatGPT, to automate any business process. Our core value is to make it extremely easy to build arbitrarily complex AI pipelines using a visual interface that allows you to connect different data sources with different AI models. Our customers use Stack AI to build applications such as: - Chatbots and Assistants: AI agents that interact with users, answer questions, and complete tasks, using your internal data and APIs. - Document Processing: apps to answer questions, summarize, and extract insights from any document, no matter how long. - Answer Questions on Databases: connect GPT-like models to databases (such as Notion, Airtable, or Postgres) and ask questions about them. - Content Creation: generate tags, summaries, and transfer styles or formats between documents and data sources.