Senior Software Engineer Identity & Access

ABOUT STACKAI StackAI is a no-code platform for designing testing and deploying AI workflows powered by large language models.

Our visual drag-and-drop interface lets teams connect their data to AI models and ship production applications — from chatbots to document-processing pipelines to database Q&A tools — without writing code.

THE ROLE Every large enterprise that adopts StackAI needs to control precisely who can do what on whose behalf across their whole organization.

We're hiring a Senior Software Engineer Identity & Access to build the access layer that makes that possible: the authentication authorization and access control that let our largest and most regulated customers adopt StackAI with confidence.

This is foundational work for enterprise adoption.

Strong identity is what lets a large organization roll StackAI out across many teams and lets their administrators manage all of it cleanly.

You'll own that layer across the platform from sign-on to fine-grained permissions.

WHAT YOU'LL DO - Own enterprise sign-on.

Deliver SSO across OIDC and SAML so customers onboard with their own identity provider. - Own authorization and RBAC.

Build role-based access control with fine-grained query-time enforcement across the product. - Own provisioning and lifecycle.

Deliver SCIM provisioning and directory sync so user and group management stays in step with the customer's directory. - Own delegated and machine identity.

Build token exchange on-behalf-of flows service accounts and domain-wide delegation so agents and services act with scoped authority. - Own access governance.

Build the entitlements session and token management and controls that keep access clean and auditable at scale.

WHAT WE'RE LOOKING FOR - 4+ years building backend systems with significant time spent on identity authentication or authorization. - Real depth in OIDC OAuth2 SAML token exchange and multi-tenant RBAC. - You've built or owned enterprise SSO and identity systems with a strong grasp of identity-provider architecture and enterprise auth patterns. - Strong in Python and modern backend frameworks (FastAPI or similar). - You care about clean well-architected access control and the experience of the administrators who manage it.

Identity is broad.

If you're strong on most of this and excited to grow into the rest we'd like to hear from you even if you don't check every box.

BONUS POINTS - SCIM and directory sync at scale. - Authorization frameworks and policy engines (OPA Cedar or Zanzibar-style systems). - Entitlements usage-based metering or billing systems. - Multi-tenant SaaS at scale. - Startup or growth-stage experience.

WHY STACKAI You'll join a lean high-impact team and own the access layer that lets the largest enterprises adopt Stack AI.

Your work ships fast and is felt across the whole product.

StackAI is an equal opportunity employer.

We celebrate diversity and are committed to creating an inclusive environment for all employees.