BambooHR

4 weeks ago

Staff Software Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 5 hours agoStatus: Live

Job Summary

Lead the design and build of BambooHR’s next-generation permission service, owningAuthN/AuthZ architecture, token strategy, and policy modeling at scale. Collaborate with product, security, and platform teams to translate access-control requirements into reusable primitives, set architectural standards, and guide cross-team RFCs in a multi-tenant SaaS environment.

Location: Utah

Workplace: Remote

Employment Type: Full time

Job Function: Software Engineering

Key Responsibilities

•Drive the architecture and delivery of a new permission service — from first design doc to production, including data model, policy evaluation engine, enforcement APIs, and token contract
•Define BambooHR’s AuthN/AuthZ standards — patterns for authentication flows, token issuance, scoped authorization, and role/attribute-based access control
•Design the API contract for the permission service: how callers request access decisions, how policies are defined, and how enforcement is decoupled from product domains
•Drive token strategy — JWT issuance, rotation, scoping, revocation, and the relationship between tokens and permissions across human and machine callers
•Partner with product and platform teams to translate domain-specific access control requirements into reusable permission primitives that scale across the organization
•Lead architectural reviews for features with AuthN/AuthZ implications and catch design debt before it ships
•Collaborate with Security and Compliance to ensure the permission service meets audit, least-privilege, and zero-trust requirements
•Set the technical bar for the Token Titans team: mentor engineers, lead RFCs, and ensure implementation quality matches architectural intent

Pay and Benefits

Perks:Health Insurance401kLife InsuranceDisability InsurancePaid Leave

Key Requirements

•10+ years of software engineering experience, with at least 3 years operating at Staff or Principal level
•Deep expertise in identity and access management — authentication protocols (OAuth 2.0, OIDC, SAML), authorization models (RBAC, ABAC, ReBAC), and token lifecycle management (JWTs, opaque tokens, refresh/rotation strategies)
•Designing and building AuthN/AuthZ systems at scale, owning the architecture that others build on
•Strong instincts for policy-as-code and permission modeling, with a data model for complex access rules
•Experience designing or reviewing OpenAPI specifications, event-driven architectures, and cross-service patterns in microservice environments

Experience:10+ yearsIdentity and access managementMulti-tenant SaaSAuthorizationOpenAPIMicroservices

Skills:PHPOAuth 2.0OIDCSAMLJWTOpenAPIRBACABACREBACToken rotationMonolithScalability

Languages:English

Tech Stack:PHPOAuth 2.0OIDCSAMLJWTOpenAPIRBACABACREBACOAuth token exchangeMulti-tenant

Company Brief

BambooHR

Provides cloud-based human resources software that streamlines HR tasks including employee onboarding, time-off tracking, performance management, and HR analytics for small to mid-sized businesses, centralizing people data and automating HR workflows.

Industry: HR Tech

Company Size: Enterprise (1,001+ employees)

Growth: Established Company

Headquarters: Lindon, United States

Founded: 2008

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

BambooHR

4 weeks ago

Staff Software Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 5 hours agoStatus: Live

Job Summary

Location: Utah

Workplace: Remote

Employment Type: Full time

Job Function: Software Engineering

Key Responsibilities

•Drive the architecture and delivery of a new permission service — from first design doc to production, including data model, policy evaluation engine, enforcement APIs, and token contract
•Define BambooHR’s AuthN/AuthZ standards — patterns for authentication flows, token issuance, scoped authorization, and role/attribute-based access control
•Design the API contract for the permission service: how callers request access decisions, how policies are defined, and how enforcement is decoupled from product domains
•Drive token strategy — JWT issuance, rotation, scoping, revocation, and the relationship between tokens and permissions across human and machine callers
•Partner with product and platform teams to translate domain-specific access control requirements into reusable permission primitives that scale across the organization
•Lead architectural reviews for features with AuthN/AuthZ implications and catch design debt before it ships
•Collaborate with Security and Compliance to ensure the permission service meets audit, least-privilege, and zero-trust requirements
•Set the technical bar for the Token Titans team: mentor engineers, lead RFCs, and ensure implementation quality matches architectural intent

Pay and Benefits

Perks:Health Insurance401kLife InsuranceDisability InsurancePaid Leave

Key Requirements

•10+ years of software engineering experience, with at least 3 years operating at Staff or Principal level
•Deep expertise in identity and access management — authentication protocols (OAuth 2.0, OIDC, SAML), authorization models (RBAC, ABAC, ReBAC), and token lifecycle management (JWTs, opaque tokens, refresh/rotation strategies)
•Designing and building AuthN/AuthZ systems at scale, owning the architecture that others build on
•Strong instincts for policy-as-code and permission modeling, with a data model for complex access rules
•Experience designing or reviewing OpenAPI specifications, event-driven architectures, and cross-service patterns in microservice environments

Experience:10+ yearsIdentity and access managementMulti-tenant SaaSAuthorizationOpenAPIMicroservices

Skills:PHPOAuth 2.0OIDCSAMLJWTOpenAPIRBACABACREBACToken rotationMonolithScalability

Languages:English

Tech Stack:PHPOAuth 2.0OIDCSAMLJWTOpenAPIRBACABACREBACOAuth token exchangeMulti-tenant

Company Brief

BambooHR

Industry: HR Tech

Company Size: Enterprise (1,001+ employees)

Growth: Established Company

Headquarters: Lindon, United States

Founded: 2008

Website LinkedIn