Note: The job is a remote job and is open to candidates in USA. Clear Fracture is inventing a new class of AI-driven data integration platforms, enabling organizations to securely connect and operationalize data across complex environments. We are seeking a backend focused Senior Software Engineer to design and build the authorization and identity systems embedded directly within our product.
Responsibilities
- Design and implement fine-grained authorization systems within the product, including role-based and policy-based access control models for users, organizations, APIs, and agent workflows
- Write production-level backend code to enforce authorization across APIs, services, and agent execution paths. Partner with other engineers to embed access control directly into core product functionality
- Implement authentication flows and integrate with enterprise identity providers (OAuth2, OIDC, SAML, Active Directory), ensuring seamless and secure user and service authentication
- Design and enforce tenant-aware access control and isolation across application services, data layers, and compute workloads
- Contribute to the design of authorization and identity architecture, including policy models, enforcement patterns, and system boundaries
- Participate in threat modeling and design reviews, with a focus on authorization boundaries, privilege escalation risks, and least-privilege enforcement
- Defining and monitoring operational constraints to mitigate the risk of prompt injection or goal-misalignment
- Design authorization approaches that function reliably across distributed systems, including cloud-connected and air-gapped environments
- Create clear abstractions, APIs, and documentation that make it easy for other engineers to correctly implement and extend authorization logic
Skills
- 4+ years of experience building authorization, identity, or authentication systems in application code
- Strong backend software engineering experience (e.g., Python, Go, Java), including: Designing APIs, Implementing authentication flows, Enforcing authorization in service logic
- Deep understanding of: RBAC, ABAC, and/or policy-based access control models, OAuth2, OpenID Connect (OIDC), SAML, and enterprise SSO
- Experience designing or implementing fine-grained permissions in complex or distributed systems
- Experience working on multi-tenant applications or systems with strong isolation requirements
- Familiarity with threat modeling and secure system design, especially around access control and trust boundaries
- Comfortable working in a collaborative engineering environment and integrating security into shared codebases
- Experience building or deploying systems in cloud environments. (AWS, Azure, or GCP)
- Strong communication skills and ability to explain technical concepts clearly
- Bachelor's degree in Computer Science or equivalent practical experience
- Due to the nature of the work, U.S. Citizenship and the ability to obtain a Secret Clearance are required
- Experience building or integrating authorization frameworks or policy engines. (e.g., OPA, Cedar, Zanzibar-inspired systems)
- Experience designing authorization for dynamic systems. (e.g., agent-based systems, workflow engines, or plugin architectures)
- Experience implementing relationship-based or context-aware access control models
- Experience supporting on-prem or air-gapped deployments
- Experience with enterprise identity integrations in complex environments
- Experience working in high-assurance or regulated environments
- Familiarity with secrets management tools. (e.g., Vault)
- Exposure to compliance frameworks. (SOC2, FedRAMP, etc.)
- Advanced degree in Computer Science or related field
- Active security clearance
Company Overview