Crusoe Staff Software Engineer at Crusoe leading the technical direction of Identity & Access Management platform. Responsible for architecture, standards, and solving high-risk security problems.
Responsibilities
Crusoe is building the world's favorite AI-first cloud, and the Identity & Access Management (IAM) team is the security bedrock our customers trust to run their most demanding AI and GPU workloads. IAM sits on the hot path for every request in the cloud, authorizing millions of requests at single-digit-millisecond latency. We are seeking a Staff Software Engineer to set the technical direction for this platform: the fine-grained authorization model, enterprise SSO and identity federation, multi-tenant organization hierarchies, identity for the agentic-AI era, and credential and secrets management. As a Staff Engineer, you will own the multi-quarter architecture across these domains, tackle our most ambiguous, highest-blast-radius problems, and operate as a force multiplier, shaping technical strategy and roadmap with security, product, and leadership, and raising the engineering bar through technical leadership and mentorship.
What You'll Be Working On:
Own IAM Architecture & Direction - Set and own the multi-quarter architecture for the fine-grained authorization model, authentication and federation, and identity lifecycle that secure every request in Crusoe's AI cloud.
Define Platform-Wide Standards - Own the identity primitives, authorization patterns, and guardrails that keep access control consistent and secure across the entire Crusoe Cloud platform.
Drive Build-vs-Buy & Framework Decisions - Lead evaluation and adoption of core IAM technologies, making durable, well-reasoned decisions.
Solve the Hardest, Highest-Risk Problems - Take on ambiguous, high-blast-radius initiatives such as scaling the authorization hot path, multi-tenancy, and tenant isolation, balancing security, reliability, and latency.
Stay Hands-On - Remain deeply technical: write and review code on the most critical and complex paths, and set the engineering quality bar through your own work.
Lead Through Influence - Drive cross-team technical alignment, author design reviews and RFCs, and steer execution across multiple teams without direct authority.
Champion Security at Scale - Lead threat modeling and secure-by-design practices for systems on the critical path of every request.
Multiply the Team - Mentor senior and mid-level engineers, raise the engineering bar, and shape hiring, onboarding, and technical strategy.
What You'll Bring to the Team:
Education & Experience - Bachelor's degree in Computer Science or a related field (or equivalent practical experience), 8+ years of software engineering experience building production distributed systems in Go, including significant experience with identity, authorization, or other security-critical systems, and a track record of leading the design of large-scale systems.
Qualification
You don't need to check every box
Preferred
Policy-as-code and modern authorization engines - OPA, Cedar, or Zanzibar-style systems such as SpiceDB and OpenFGA.
Experience with identity for AI agents and agentic workloads.
Experience building for or operating GPU / AI cloud infrastructure.
Enterprise compliance experience beyond SOC 2, such as FedRAMP or other regulated-environment frameworks.
You don't need to check every box. If you bring deep expertise in several of these areas and are excited about this work, we encourage you to apply even if you aren't a 100% skill or experience match.
