Staff Software Engineer - Identity & Access Management
Brex is hiring a Senior Software Engineer for its Identity & Access Management team in San Francisco (hybrid). The role designs, builds, and operates backend systems and APIs for authentication, authorization, identity, and audit workflows (SSO, MFA, OAuth/SAML/OIDC, custom roles, Okta/Oso integrations), while leading projects and mentoring engineers.
- Compensation
- $192K–$240K / yr
- Location
- San Francisco, California, United States
- Work setup
- Remote
- Seniority
- Staff
- Employment
- Not specified
- Experience
- Not specified
- Category
- Software engineering
- Posted
Skills
Must have
- 7+ years of professional experience designing, developing, and deploying applications
- Strong software engineering fundamentals and experience building reliable production backend systems
- Experience leading complex projects and mentoring other engineers
- Strong API design fundamentals, rigor around testing, code quality, and documentation
- Understanding of core IAM concepts such as authentication, authorization, sessions, tokens, MFA, SSO, OAuth, SAML, OIDC, or RBAC
- Clear communication and effectiveness in cross-functional technical discussions
- Care about operational excellence: improving reliability, reducing toil, maintaining high-quality services
- Strong product and engineering judgment balancing security, usability, and developer experience
Nice to have
- Experience working on IAM, authentication, authorization, or audit systems in production
- Hands-on experience with Okta, Oso, SSO, SAML, OIDC, OAuth, passkeys, or WebAuthn
- Experience building enterprise-facing admin controls, custom roles, delegated access flows, or audit trails
- Experience on platform teams providing shared infrastructure, paved roads, or secure-by-default frameworks
Full description
Why join us
Brex is the intelligent finance platform that enables companies to spend smarter and move faster in more than 200 markets. By combining global corporate cards and banking with intuitive spend management, bill pay, and travel software, Brex enables founders and finance teams to accelerate operations, gain real-time visibility, and control spend effortlessly. Brex’s AI-native automation and world-class service eliminate manual expense and accounting tasks for customers so they can focus on what matters most. Tens of thousands of the world's best companies run on Brex, including DoorDash, Coinbase, Robinhood, Zoom, Plaid, Reddit, and SeatGeek.
Working at Brex allows you to push your limits, challenge the status quo, and collaborate with some of the brightest minds in the industry. We’re committed to building a diverse team and inclusive culture and believe your potential should only be limited by how big you can dream. We make this a reality by empowering you with the tools, resources, and support you need to grow your career.
Engineering at Brex
Engineering at Brex is about building systems that scale with speed and intention. Our teams operate with high autonomy and deep collaboration, own outcomes end to end, and push for excellence from architecture to deployment. It’s an environment where engineering is a craft and builders grow by solving meaningful technical problems.
What you’ll do
The Identity and Access Management team builds and maintains secure, user-friendly authentication and authorization systems that protect users, safeguard company assets, and provide a seamless access experience for developers. The team owns critical platform capabilities including login methods, step-up authentication, our custom authorization platform, account delegation flows like Copilot, Pro Access login, embedded partnerships authentication, and core vendor integrations.
As a Staff Engineer on IAM, you will lead projects and initiatives to improve the security, reliability, and developer experience of our authentication, authorization, and identity platforms for customers, partners, and internal systems. You will scope and drive projects with clear impact, work cross-functionally with the broader engineering organization, help define the team’s technical quality, and help evolve the identity platform as Brex invests in signed identity propagation, delegated and agent identity, fine-grained authorization, stronger auditability, and enterprise-ready customer authentication experiences.
Where you’ll work
This role will be based in our San Francisco office. We are a hybrid environment that combines the energy and connections of being in the office with the benefits and flexibility of working from home. We currently require Monday, Wednesday and Thursday to be designated in office days. As a perk, we also have up to four weeks per year of fully remote work!