SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
GoFundMe is seeking a Senior Staff Software Engineer to lead the architecture, evolution, and reliability of its Identity & Access Management (IAM) platform. This foundational layer serves millions of users across consumer, nonprofit, and enterprise surfaces, handling authentication, authorization, session management, and token lifecycle.
You will own the end-to-end IAM architecture spanning consumer and enterprise contexts, establishing trust boundaries and integration contracts that make the secure path the default. Key responsibilities include:
- Define and evolve IAM architecture across authentication, authorization, session management, and token lifecycle for both consumer and enterprise contexts.
- Own enterprise identity onboarding for nonprofit customers, building repeatable, self-service SSO and SCIM provisioning patterns that scale across diverse IdP configurations.
- Architect federation and provisioning patterns (OIDC, SAML 2.0, SCIM) that work reliably across large institutions and grassroots organizations.
- Make principled build-vs.-integrate decisions across vendor platforms (Descope, Auth0, Okta) and in-house systems, owning tradeoffs and migration paths.
- Design and operate MFA orchestration and step-up authentication flows, integrating risk signals to make adaptive auth decisions without unnecessary friction.
- Own the consumer identity platform, including CIAM, session management, passwordless authentication, and social login, balancing security against conversion.
- Establish policy enforcement architecture (PEP/PAP) and contracts for reliable authorization enforcement across surfaces.
- Own the IAM technical roadmap, prioritizing based on user impact, enterprise requirements, compliance, and feasibility.
- Partner with Identity & Risk Intelligence, Payments, Security, and Integrity teams as the IAM platform interface.
- Mentor engineers across the Identity team and broader Platform organization.
You will report to the Sr. Manager of Identity and Integrity Engineering, working alongside an Identity & Risk Intelligence engineer and a Policy and Data engineer. The role requires 3x/week in-office presence in San Francisco.
