JobsBackendStaff Software Engineer, Identity and Access Management
Kong

Kong

·

Backend

Staff Software Engineer, Identity and Access Management

RemoteLeadPosted Aug 17, 2026
OAuthJWTSAMLOpenID ConnectSCIMLDAPKubernetesGo+26 more

About this role

Architect Kong Identity's multi-tenant identity platform supporting complex organizational hierarchies, cross-tenant isolation, and enterprise-grade security controls. Lead development of advanced token management, claims engines, and global identity infrastructure with sub-millisecond authentication latency worldwide.

Must have

7+ years building production identity platforms at scale handling millions of auth requests daily

Deep expertise in OAuth 2.0 extensions, OpenID Connect, and emerging standards like OAuth 2.1 and GNAP

Proven experience architecting multi-tenant identity platforms with complex isolation requirements

Strong background in cryptographic protocols, JWT patterns, key rotation, and HSM integration

Experience with global identity infrastructure, edge deployment, and cross-region data consistency

Deep understanding of SAML federation, LDAP/AD bridges, SCIM provisioning, and custom protocol adapters

Proven track record building developer-first identity platforms with SDKs and webhook systems

Experience with threat modeling, penetration testing coordination, and attack prevention mechanisms

Strong background in compliance frameworks including SOC 2, FedRAMP, and GDPR

Expertise in high-performance system design, horizontal scaling, and latency optimization

Knowledge of service mesh identity patterns and workload identity bootstrapping

Experience with identity protocol extensions and custom grant flows

Technologies

PythonAWSAzureGitDockerRESTPostgreSQLTerraformKafkaMongoDBMicroservicesRedisGCPCloudGrafanaPrometheusOAuthgRPCCryptographyKubernetesGoDatadogCI/CDAPISDKSAMLJWTOpenID ConnectSCIMLDAPHSMService meshWebhooksDistributed tracing

Responsibilities

Design and implement advanced token management systems including refresh token rotation and proof-of-possession tokens

Lead development of extensible claims engine supporting dynamic attribute resolution and contextual claim injection

Architect global identity infrastructure with edge optimization and cross-region replication for sub-millisecond latency

Design rate limiting, anomaly detection, and fraud prevention systems against credential stuffing and distributed attacks

Build enterprise identity federation capabilities including SAML bridge patterns and external IdP chaining

Lead technical strategy for developer experience including SDKs, webhooks, audit logging, and real-time analytics

Architect advanced client management systems with dynamic registration and automated credential rotation

Design plugin architecture enabling custom grant flows and third-party integrations while maintaining security boundaries

Drive implementation of compliance frameworks with comprehensive audit trails and privacy-preserving token designs

Lead integration with observability platforms supporting distributed tracing and security event correlation

Mentor engineering teams on zero-trust architectures, workload identity, and service mesh integration patterns

Benefits

Competitive salaryStock optionsRemote work

Recruitment process

1

Kong is building the future of API management for developers

2

Fast-growing, well-funded company with happy customers and motivated employees

3

Insomnia, acquired in 2019, is a full-lifecycle API development platform integral to Kong's portfolio

4

Kong Inc. is a leading developer of API and AI connectivity technologies building infrastructure for the agentic era

5

Kong Konnect enables organizations to secure, manage, accelerate, govern, and monetize API and AI model flows

6

Trusted by Fortune 500 and startups alike