Note: The job is a remote job and is open to candidates in USA. Docker, Inc is a leading company in developer tooling trusted by millions of users. They are looking for a Senior Software Engineer to join their IAM team, responsible for managing Docker's identity systems that govern user access and security. This role involves designing and operating services related to authentication and authorization, ensuring high performance and security for millions of users.
Responsibilities
- Design, build, and operate Go services powering authentication, authorization, token handling, and identity lifecycle across Docker
- Extend OIDC, SSO, SAML, and SCIM integrations, and evolve our authorization model (including ReBAC) as permissions scale across products and tenants
- Improve observability, performance, and security posture of identity services on the hot path of every authenticated request, and strengthen audit logging
- Design for multi-region operation, graceful degradation, and safe rollout of changes to critical auth flows
- Lead projects end-to-end, contribute to technical design and long-term direction of the IAM platform, and mentor teammates in identity and security domains
- Partner with Product, Security, and engineering teams that depend on IAM primitives to ensure our APIs are clear, safe, and easy to adopt
- This role may require participation in an on-call rotation to provide support outside of standard business hours, including evenings, weekends, and holidays, as needed
Skills
- 6+ years of backend software engineering experience building and operating production services
- Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent practical experience
- Strong proficiency in Go, including building and operating services in production
- Solid working knowledge of PostgreSQL - schema design, query performance, migrations, and operating Postgres under real load
- Experience with gRPC and event-driven systems using Kafka (or comparable)
- Experience operating on AWS
- Strong understanding of core identity and security concepts: OAuth2, OIDC, SAML, JWT, token lifecycle, and session management
- Experience with authorization models, including RBAC and ReBAC-style approaches
- Track record of designing and operating distributed systems where reliability, security, and correctness are first-class concerns
- Willingness and ability to participate in an on-call rotation for services on the critical request path
- Excellent written and verbal communication skills in a remote, async-first environment
- Production experience with SCIM provisioning and enterprise SSO integrations
- Hands-on experience with Auth0 or similar identity platforms
- Experience building or operating multi-region services and understanding the tradeoffs involved
- Exposure to compliance frameworks relevant to identity (SOC 2, ISO 27001, GDPR)
- Experience with audit logging at scale, or with building identity primitives for machine / workload identities
Benefits
- Offers Equity
- Freedom & flexibility; fit your work around your life
- Designated quarterly Whaleness Days plus end of year Whaleness break
- Home office setup; we want you comfortable while you work
- 16 weeks of paid Parental leave (after 6 months of employment)
- Technology stipend equivalent to $100 USD net/month
- PTO plan that encourages you to take time to do the things you enjoy
- Training stipend for conferences, courses and classes
- Equity; we are a growing start-up and want all employees to have a share in the success of the company
- Docker Swag
- Medical benefits, retirement and holidays vary by country
- Remote-first culture, with offices in Seattle and Paris
Company Overview
Company H1B Sponsorship