3 months ago

Staff Software Engineer, Identity and Access Management

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 23 hours agoStatus: Live

Job Summary

A Staff Software Engineer on Kong’s Konnect team designs and builds a multi-tenant, enterprise-grade identity platform. You’ll architect token management, claims, edge-ready identity infrastructure, security controls, and compliance features, while guiding developer experience, client management, and integrations with federated identity standards at global scale.

Location: Toronto

Workplace: Remote

Employment Type: Full time

Job Function: Software Engineering

Key Responsibilities

•Design and implement advanced token management systems, including refresh token rotation, proof-of-possession tokens, and custom token introspection with real-time revocation capabilities
•Lead development of Kong Identity's extensible claims engine supporting dynamic attribute resolution, contextual claim injection, and complex business logic evaluation at token issuance
•Architect global identity infrastructure with edge optimization, intelligent token caching, and cross-region replication strategies for sub-millisecond authentication latency worldwide
•Design sophisticated rate limiting, anomaly detection, and fraud prevention systems to protect against credential stuffing, token abuse, and distributed attacks
•Build enterprise identity federation capabilities, including SAML bridge patterns, external IdP chaining, and custom protocol adapters for legacy system integration

Pay and Benefits

Salary: CAD 163,685 - 245,800 annually

Key Requirements

•7+ years of experience building production identity platforms, with a track record handling millions of authentication requests daily
•Deep expertise in OAuth 2.0 extensions (PKCE, mTLS, JWT bearer assertions, token exchange), OpenID Connect, and standards like OAuth 2.1 and GNAP
•Multi-tenant identity platform experience with complex isolation requirements
•Strong cryptographic expertise including JWT patterns, key rotation, and Hardware Security Module (HSM) integration
•Experience with compliance and regulatory requirements for identity systems (audit trails, data residency, privacy engineering)

Experience:7+ yearsIdentityEnterprise softwareAuthenticationSecurity

Skills:LeadershipMentoringCommunicationProblem-solvingCollaboration

Tech Stack:OAuth 2.0OpenID ConnectPKCEMTLSJWTSAMLLDAPSCIMHSMToken introspectionEdge computingReal-time analyticsAudit loggingZero-trustService mesh

Company Brief

Kong

Provides a cloud-native API and service connectivity platform (Kong Gateway, Konnect, Kuma, Insomnia) that secures, manages, and observes APIs and microservices for enterprises across cloud and hybrid environments.

Industry: API Platforms

Company Size: Large (251 to 1,000 employees)

Revenue: USD 100M to 250M

Growth: Scaleup

Valuation: Unicorn (USD 1B+)

Funding: Series E+

Headquarters: San Francisco, United States

Founded: 2017

Glassdoor: 3.9

Website LinkedIn Glassdoor

Loading job details...

Preparing the role view and application actions.

Kong

3 months ago

Staff Software Engineer, Identity and Access Management

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 23 hours agoStatus: Live

Job Summary

Location: Toronto

Workplace: Remote

Employment Type: Full time

Job Function: Software Engineering

Key Responsibilities

•Design and implement advanced token management systems, including refresh token rotation, proof-of-possession tokens, and custom token introspection with real-time revocation capabilities
•Lead development of Kong Identity's extensible claims engine supporting dynamic attribute resolution, contextual claim injection, and complex business logic evaluation at token issuance
•Architect global identity infrastructure with edge optimization, intelligent token caching, and cross-region replication strategies for sub-millisecond authentication latency worldwide
•Design sophisticated rate limiting, anomaly detection, and fraud prevention systems to protect against credential stuffing, token abuse, and distributed attacks
•Build enterprise identity federation capabilities, including SAML bridge patterns, external IdP chaining, and custom protocol adapters for legacy system integration

Pay and Benefits

Salary: CAD 163,685 - 245,800 annually

Key Requirements

•7+ years of experience building production identity platforms, with a track record handling millions of authentication requests daily
•Deep expertise in OAuth 2.0 extensions (PKCE, mTLS, JWT bearer assertions, token exchange), OpenID Connect, and standards like OAuth 2.1 and GNAP
•Multi-tenant identity platform experience with complex isolation requirements
•Strong cryptographic expertise including JWT patterns, key rotation, and Hardware Security Module (HSM) integration
•Experience with compliance and regulatory requirements for identity systems (audit trails, data residency, privacy engineering)

Experience:7+ yearsIdentityEnterprise softwareAuthenticationSecurity

Skills:LeadershipMentoringCommunicationProblem-solvingCollaboration

Tech Stack:OAuth 2.0OpenID ConnectPKCEMTLSJWTSAMLLDAPSCIMHSMToken introspectionEdge computingReal-time analyticsAudit loggingZero-trustService mesh

Company Brief

Kong

Industry: API Platforms

Company Size: Large (251 to 1,000 employees)

Revenue: USD 100M to 250M

Growth: Scaleup

Valuation: Unicorn (USD 1B+)

Funding: Series E+

Headquarters: San Francisco, United States

Founded: 2017

Glassdoor: 3.9

Website LinkedIn Glassdoor