Sr Backend Engineer, Identity & Access Management

Software powers the world, and LaunchDarkly empowers teams to deliver and control it safely. As a Senior Backend Engineer on the Identity & Access Management team, you will own the systems every customer touches before they touch anything else: SAML and OAuth2 single sign-on, SCIM user and team provisioning, login and session management, multi-factor authentication, and the API key and token infrastructure that authenticates every request to our platform. When authentication is wrong, customers cannot get in at all — or the wrong person gets in. Security and availability here are commitments to our customers, not nice-to-haves.

You and your team will make this stack operable and enterprise-ready. Technologies include Go, TypeScript, CockroachDB, Redis, AWS, and Terraform. Exact tool match matters far less than deep backend judgment and a track record of safely changing systems that are not allowed to be wrong.

• Own LaunchDarkly’s authentication surface end to end — single sign-on, SCIM provisioning, login and session flows, multi-factor authentication, and API key and token authentication.

• Build the enterprise identity capabilities our largest customers require: additional identity-provider integrations, support for multiple IdPs per account, and MFA enforcement by default.

• Make the stack operable: SLOs, monitoring for certificate expiry and provisioning failures, actionable alerting, runbooks, and a sustainable on-call.

• Partner with Product Security on threat modeling, audit logging, and compliance requirements including SOC 2 and FedRAMP.

• Set the technical direction for identity at LaunchDarkly, and raise the bar for the engineers around you through design review and mentorship.

• 6+ years of professional software-engineering experience, with significant work on complex backend applications.

• Experience building or operating production authentication and identity systems.

• A track record on systems where correctness and availability are non-negotiable, and the habits that come with it: backward-compatible change, staged rollouts, and safe cutovers.

• Proficiency in at least one backend language (Go, Rust, Python, etc.) and familiarity with cloud infrastructure (AWS or equivalent), plus strong production ownership including on-call.

Bonus

• Protocol depth in <span