Staff Software Engineer, Identity and Access Management

Kong
Toronto
Workplace: RemoteFull timeCAD 163,685 - 245,800 annuallyFunction: Software EngineeringExperience: 7+ yearsSkills: ["Leadership","Mentoring","Communication","Problem-solving","Collaboration"]

A Staff Software Engineer on Kong’s Konnect team designs and builds a multi-tenant, enterprise-grade identity platform. You’ll architect token management, claims, edge-ready identity infrastructure, security controls, and compliance features, while guiding developer experience, client management, and integrations with federated identity standards at global scale.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Kong
Kong
5 months ago

Staff Software Engineer, Identity and Access Management

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 17 hours agoStatus: Live

Job Summary

A Staff Software Engineer on Kong’s Konnect team designs and builds a multi-tenant, enterprise-grade identity platform. You’ll architect token management, claims, edge-ready identity infrastructure, security controls, and compliance features, while guiding developer experience, client management, and integrations with federated identity standards at global scale.
Location: Toronto
Workplace: Remote
Employment Type: Full time
Job Function: Software Engineering

Key Responsibilities

  • •Design and implement advanced token management systems, including refresh token rotation, proof-of-possession tokens, and custom token introspection with real-time revocation capabilities
  • •Lead development of Kong Identity's extensible claims engine supporting dynamic attribute resolution, contextual claim injection, and complex business logic evaluation at token issuance
  • •Architect global identity infrastructure with edge optimization, intelligent token caching, and cross-region replication strategies for sub-millisecond authentication latency worldwide
  • •Design sophisticated rate limiting, anomaly detection, and fraud prevention systems to protect against credential stuffing, token abuse, and distributed attacks
  • •Build enterprise identity federation capabilities, including SAML bridge patterns, external IdP chaining, and custom protocol adapters for legacy system integration

Pay and Benefits

Salary: CAD 163,685 - 245,800 annually

Key Requirements

  • •7+ years of experience building production identity platforms, with a track record handling millions of authentication requests daily
  • •Deep expertise in OAuth 2.0 extensions (PKCE, mTLS, JWT bearer assertions, token exchange), OpenID Connect, and standards like OAuth 2.1 and GNAP
  • •Multi-tenant identity platform experience with complex isolation requirements
  • •Strong cryptographic expertise including JWT patterns, key rotation, and Hardware Security Module (HSM) integration
  • •Experience with compliance and regulatory requirements for identity systems (audit trails, data residency, privacy engineering)
Experience:7+ yearsIdentityEnterprise softwareAuthenticationSecurity
Skills:LeadershipMentoringCommunicationProblem-solvingCollaboration
Tech Stack:OAuth 2.0OpenID ConnectPKCEMTLSJWTSAMLLDAPSCIMHSMToken introspectionEdge computingReal-time analyticsAudit loggingZero-trustService mesh

Company Brief

Kong
Provides a cloud-native API and service connectivity platform (Kong Gateway, Konnect, Kuma, Insomnia) that secures, manages, and observes APIs and microservices for enterprises across cloud and hybrid environments.
Industry: API Platforms
Company Size: Large (251 to 1,000 employees)
Revenue: USD 100M to 250M
Growth: Scaleup
Valuation: Unicorn (USD 1B+)
Funding: Series E+
Headquarters: San Francisco, United States
Founded: 2017
Glassdoor
Glassdoor: 3.9
WebsiteLinkedInGlassdoor