Staff Software Engineer

BambooHR
Utah
Workplace: RemoteFull timeFunction: Software EngineeringExperience: 10+ yearsSkills: ["PHP","OAuth 2.0","OIDC","SAML","JWT","OpenAPI","RBAC","ABAC","REBAC","Token rotation","Monolith","Scalability"]

Lead the design and build of BambooHR’s next-generation permission service, owningAuthN/AuthZ architecture, token strategy, and policy modeling at scale. Collaborate with product, security, and platform teams to translate access-control requirements into reusable primitives, set architectural standards, and guide cross-team RFCs in a multi-tenant SaaS environment.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
BambooHR
BambooHR
2 months ago

Staff Software Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 17 hours agoStatus: Live
Reposted: similar role first listed 3 months ago

Job Summary

Lead the design and build of BambooHR’s next-generation permission service, owningAuthN/AuthZ architecture, token strategy, and policy modeling at scale. Collaborate with product, security, and platform teams to translate access-control requirements into reusable primitives, set architectural standards, and guide cross-team RFCs in a multi-tenant SaaS environment.
Location: Utah
Workplace: Remote
Employment Type: Full time
Job Function: Software Engineering

Key Responsibilities

  • •Drive the architecture and delivery of a new permission service — from first design doc to production, including data model, policy evaluation engine, enforcement APIs, and token contract
  • •Define BambooHR’s AuthN/AuthZ standards — patterns for authentication flows, token issuance, scoped authorization, and role/attribute-based access control
  • •Design the API contract for the permission service: how callers request access decisions, how policies are defined, and how enforcement is decoupled from product domains
  • •Drive token strategy — JWT issuance, rotation, scoping, revocation, and the relationship between tokens and permissions across human and machine callers
  • •Partner with product and platform teams to translate domain-specific access control requirements into reusable permission primitives that scale across the organization
  • •Lead architectural reviews for features with AuthN/AuthZ implications and catch design debt before it ships
  • •Collaborate with Security and Compliance to ensure the permission service meets audit, least-privilege, and zero-trust requirements
  • •Set the technical bar for the Token Titans team: mentor engineers, lead RFCs, and ensure implementation quality matches architectural intent

Pay and Benefits

Perks:Health Insurance401kLife InsuranceDisability InsurancePaid Leave

Key Requirements

  • •10+ years of software engineering experience, with at least 3 years operating at Staff or Principal level
  • •Deep expertise in identity and access management — authentication protocols (OAuth 2.0, OIDC, SAML), authorization models (RBAC, ABAC, ReBAC), and token lifecycle management (JWTs, opaque tokens, refresh/rotation strategies)
  • •Designing and building AuthN/AuthZ systems at scale, owning the architecture that others build on
  • •Strong instincts for policy-as-code and permission modeling, with a data model for complex access rules
  • •Experience designing or reviewing OpenAPI specifications, event-driven architectures, and cross-service patterns in microservice environments
Experience:10+ yearsIdentity and access managementMulti-tenant SaaSAuthorizationOpenAPIMicroservices
Skills:PHPOAuth 2.0OIDCSAMLJWTOpenAPIRBACABACREBACToken rotationMonolithScalability
Languages:English
Tech Stack:PHPOAuth 2.0OIDCSAMLJWTOpenAPIRBACABACREBACOAuth token exchangeMulti-tenant

Company Brief

BambooHR
Provides cloud-based human resources software that streamlines HR tasks including employee onboarding, time-off tracking, performance management, and HR analytics for small to mid-sized businesses, centralizing people data and automating HR workflows.
Industry: HR Tech
Company Size: Enterprise (1,001+ employees)
Growth: Established Company
Headquarters: Lindon, United States
Founded: 2008
WebsiteLinkedIn