Responsibilities

Candidates considered for this role will be located in the San Francisco Bay Area. There will be an in-office expectation of 3x a week.
Define and evolve the end-to-end IAM architecture spanning authentication, authorization, session management, and token lifecycle across consumer and enterprise contexts. Establish the trust boundaries, integration contracts, and platform primitives that make the secure path the default for every team consuming identity services.
Own the enterprise identity onboarding experience for our nonprofit customers: repeatable, self-service SSO, SCIM provisioning, and multi-tenant trust patterns that scale without bespoke integration per partner.
Architect federation and provisioning patterns (OIDC, SAML 2.0, SCIM) that hold up across a wide range of enterprise IdP configurations, from large institutions to small grassroots organizations.
Make principled build vs. integrate decisions across vendor platforms (Descope, Auth0, Okta) and in-house systems, owning the tradeoffs, migration paths, and long-term cost of change.
Design and operate MFA orchestration and step-up authentication flows, integrating risk signals from the Identity & Risk Intelligence engineer to make adaptive, confident auth decisions without adding unnecessary friction for the legitimate majority.
Own the consumer identity platform, including Descope CIAM, session management, passwordless authentication, and social login, balancing security against funnel conversion with a lean toward the enterprise and Pro surfaces where IAM complexity is highest.
Establish policy enforcement architecture (PEP and PAP) and the contracts by which authorization decisions are reliably enforced at runtime across consumer and enterprise surfaces.
Own the IAM technical roadmap, prioritizing initiatives based on user impact, enterprise requirements, compliance obligations, and technical feasibility.
Partner with Identity & Risk Intelligence, Payments, Security, and Integrity as the IAM platform interface for the systems that depend on it.
Mentor engineers across the Identity team and the broader Platform Tribe, raising the bar on system design, security thinking, and operational rigor.
8+ years of software engineering experience, with significant time at senior, staff, or principal levels working on platform or infrastructure systems.

Senior Staff Software Engineer (Identity Platform) at Gofundme · LumiJobs

Senior Staff Software Engineer (Identity Platform)

Responsibilities

Qualification

Preferred

Benefits

Company

Gofundme

More roles at Gofundme