Staff Software Development Engineer - JIT Proxy

Role overview

Staff-level engineering role on the team building a universal access management platform that secures and audits connections to databases, servers, Kubernetes clusters, and web applications. The position focuses on the proxy and control-plane layer, applying deep expertise in distributed systems, security, and cloud architecture to shape technical direction across multiple teams. The work emphasizes high-scale, concurrent backend systems written in Go and operates at the intersection of networking, cryptography, and identity.

Responsibilities

- Lead architectural design for highly concurrent, distributed backend services written in Go, setting engineering standards that propagate across multiple teams. - Drive design decisions for the proxy data plane (gateways and relays) and control-plane services, weighing tradeoffs on ambiguous, high-impact technical problems. - Partner with architects, product managers, and SRE/DevOps leadership to shape multi-quarter system roadmaps. - Serve as a subject matter expert on secure network protocols and cryptographic systems, including TLS/mTLS, credential brokering, and key management, guiding their application across the platform. - Lead code and design reviews with a high bar for performance, security, and maintainability, and mentor engineers on applying those standards independently. - Investigate and resolve the most challenging production issues across multi-cloud environments, and author architectural and technical strategy documentation that informs decisions beyond the immediate team.

Requirements

- Extensive experience designing and operating concurrent, distributed backend systems in Go (Golang). - Proven track record working in multi-cloud production environments and applying infrastructure-as-code (Terraform) along with CI/CD pipelines. - Deep expertise with secure protocols, mTLS, PKI, secrets management (HashiCorp Vault, AWS Secrets Manager, Azure Key Vault), and credential brokering. - Familiarity proxying database, SSH/RDP, Kubernetes, and HTTP traffic, and experience building CLI or desktop client tooling. - Experience shaping Zero Trust architecture strategy, just-in-time access models, and policy-as-code (e.g., Cedar) at an organizational level.

Nice to have

- Background influencing engineering practices beyond an immediate team, including mentoring senior engineers and aligning cross-team execution with company objectives.

Benefits and work setup

- Competitive compensation with a meaningful bonus program and benefits package, including health insurance, retirement/pension matching, comprehensive life insurance, an employee assistance program, paid time off, and company holidays. - Global, collaborative team culture with stated values centered on spirited execution, trust, respect, ownership, nimbleness, and global perspective. - Candidates who do not require current or future visa sponsorship are eligible for this role.