Canva

1 day ago

Staff Backend Software Engineer - User Platform

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 2 hours agoStatus: Live

Job Summary

Build and own core authorization and access control capabilities for Canva’s User Platform, including a centralized SpiceDB-backed authorization system. Partner with Security, API Platform, Admin Experience, and product engineering to design patterns, tooling, and integrations that make authorization safe and easy at massive scale. Shape identity and access control models for agentic AI workflows, make high-availability trade-offs, and mentor engineers on IAM best practices.

Location: Melbourne

Workplace: Hybrid

Employment Type: Full time

Job Function: Software Engineering

Seniority: Mid level

Key Responsibilities

•Design, build, and own core authorization and access control components, including a centralized SpiceDB-backed authorization platform.
•Create authorization patterns, tooling, and integrations to help product teams adopt these capabilities correctly at Canva’s scale.
•Make technical trade-offs for critical high-availability infrastructure serving hundreds of millions of users.
•Partner with Security, API Platform, Admin Experience, and product engineering to align on requirements and drive adoption.
•Shape the platform direction across identity model, access control model, request context, and authorization for agentic AI workflows, and mentor the team on IAM best practices.

Key Requirements

•Direct experience designing and operating identity and access management systems at scale (RBAC/ReBAC/ABAC or Zanzibar-style systems such as SpiceDB) in production.
•Strong backend engineering experience building and running high-performance, high-availability distributed services (Java a plus).
•Expert system design skills to break down ambiguous, cross-cutting authorization problems into sequenced work.
•Demonstrated ability to drive adoption of platform capabilities across engineering teams with clear technical communication and stakeholder alignment.
•Strong written and verbal communication with a collaborative approach across teams.

Experience:Identity and access managementDistributed systemsHigh-availability systemsPlatform engineeringSecurity

Skills:System designTechnical communicationCollaborationStakeholder alignmentMentorship

Languages:English

Tech Stack:SpiceDBZanzibarRBACReBACABACOPACedarJava

Company Brief

Canva

Canva is an online visual communications platform that provides drag-and-drop design tools, templates, and media assets for creating presentations, social media graphics, videos, documents and more, serving individuals and large enterprises globally.

Industry: Enterprise Software

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Scaleup

Valuation: Decacorn (USD 10B+)

Funding: Series E+

Headquarters: Surry Hills, New South Wales, Australia

Founded: 2012

Glassdoor: 3.9

Website LinkedIn Glassdoor

Loading job details...

Preparing the role view and application actions.

Canva

1 day ago

Staff Backend Software Engineer - User Platform

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 2 hours agoStatus: Live

Job Summary

Location: Melbourne

Workplace: Hybrid

Employment Type: Full time

Job Function: Software Engineering

Seniority: Mid level

Key Responsibilities

•Design, build, and own core authorization and access control components, including a centralized SpiceDB-backed authorization platform.
•Create authorization patterns, tooling, and integrations to help product teams adopt these capabilities correctly at Canva’s scale.
•Make technical trade-offs for critical high-availability infrastructure serving hundreds of millions of users.
•Partner with Security, API Platform, Admin Experience, and product engineering to align on requirements and drive adoption.
•Shape the platform direction across identity model, access control model, request context, and authorization for agentic AI workflows, and mentor the team on IAM best practices.

Key Requirements

•Direct experience designing and operating identity and access management systems at scale (RBAC/ReBAC/ABAC or Zanzibar-style systems such as SpiceDB) in production.
•Strong backend engineering experience building and running high-performance, high-availability distributed services (Java a plus).
•Expert system design skills to break down ambiguous, cross-cutting authorization problems into sequenced work.
•Demonstrated ability to drive adoption of platform capabilities across engineering teams with clear technical communication and stakeholder alignment.
•Strong written and verbal communication with a collaborative approach across teams.

Experience:Identity and access managementDistributed systemsHigh-availability systemsPlatform engineeringSecurity

Skills:System designTechnical communicationCollaborationStakeholder alignmentMentorship

Languages:English

Tech Stack:SpiceDBZanzibarRBACReBACABACOPACedarJava

Company Brief

Canva

Industry: Enterprise Software

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Scaleup

Valuation: Decacorn (USD 10B+)

Funding: Series E+

Headquarters: Surry Hills, New South Wales, Australia

Founded: 2012

Glassdoor: 3.9

Website LinkedIn Glassdoor