SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Strava is a global community platform for active people, with over 200 million athletes across 185+ countries. The Privacy and Identity team owns account security, authentication, and privacy controls across all platforms—iOS, Android, and web.
In this role, you'll be a fullstack engineer building and improving systems that keep athlete accounts secure and accessible. You'll work across mobile and backend services to develop features spanning sign-up, login, password management, account recovery, and privacy controls. Your work will directly impact how millions of athletes securely access and manage their data on Strava.
Key responsibilities include:
- Building and shipping features across account sign-up, login, password management, and account recovery on mobile (iOS/Android) and backend services
- Designing and implementing intuitive privacy controls that give athletes clear visibility and control over their data
- Partnering with Product, Security, Trust & Safety, and Legal teams to build compliant, integrity-focused features
- Driving consistency in login, privacy, and account experiences across all platforms
- Using data to monitor and improve login success rates, recovery flows, and privacy control engagement
- Participating in code reviews, design discussions, and on-call rotations
- Breaking down ambiguous problems into well-scoped, multi-component solutions and weighing technical trade-offs
Strava operates a flexible hybrid model requiring more than half your time on-site in the San Francisco office, approximately three days per week.
Requirements:
- 5+ years of software engineering experience with fullstack capabilities spanning mobile (iOS or Android) and backend/server systems
- Comfort ramping up on systems that keep user accounts secure and accessible; prior identity-specific experience not required
- Ability to break down complex, ambiguous problems into multi-component solutions
- Product mindset: ability to balance user experience with data protection and abuse prevention
- Strong collaboration skills and comfort partnering across product, security, and legal stakeholders
- Plus: experience with authentication protocols (OAuth, SSO) or work in privacy- or compliance-sensitive domains
