Senior Software Engineer I - Identity & Access Management

About the role

DigitalOcean is looking for a Senior Software Engineer I to join the Customer Trust & Engineering team, focusing on Identity and Access Management (IAM). You will own end‑to‑end technical workstreams, design high‑availability authentication services, and help shape the security foundation for billions of transactions.

Key responsibilities

• Design and develop high‑availability, low‑latency authentication and authorization services in Go, taking ownership from design through production operation.
• Lead implementation of OIDC and SAML integrations to enable federated Single Sign‑On for enterprise customers.
• Extend the Policy Engine (OPA/Rego) to support advanced resource‑level permissions and dynamic scoping.
• Contribute to IAM foundations for emerging AI/ML platforms, designing secure token exchange patterns.
• Scale multi‑tenant data models for users, teams, organizations and resource boundaries.
• Drive service reliability through Kubernetes tuning, data pipeline modernization and on‑call support.
• Identify and remediate security vulnerabilities across authentication flows.
• Mentor junior engineers through code reviews and design feedback.

Required profile

• 4–7 years of software engineering experience, with 1–2 years focused on identity, security products or high‑scale distributed systems.
• Strong proficiency in Go and experience with gRPC microservices.
• Solid understanding of identity protocols (OIDC, OAuth2, SAML) and access control models (RBAC, ABAC, PBAC).
• Deep knowledge of distributed systems concepts such as consensus, replication and partitioning.
• Hands‑on experience with Kubernetes, MySQL and Infrastructure as Code (Terraform).
• Proven ability to decompose complex systems into clean, maintainable abstractions.
• Effective communication and collaboration across cross‑functional teams.

Required skills

• Go
• gRPC
• OIDC, OAuth2, SAML
• RBAC, ABAC, PBAC
• Kubernetes
• MySQL
• Terraform
• Open Policy Agent (OPA) / Rego
• Canary and Blue‑Green deployment strategies
• SCIM, LDAP

What we offer

• Competitive salary with bonus potential and equity compensation.
• Reimbursement for conferences, training and education; access to LinkedIn Learning.
• Employee Assistance Program, flexible time‑off policy and local meetups.
• Hybrid work model supporting both onsite collaboration and remote flexibility.