SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
LaunchDarkly is seeking a Senior Backend Engineer to own the Identity & Access Management systems that power authentication across their feature management platform. You will be responsible for the critical systems every customer touches first: SAML and OAuth2 single sign-on, SCIM user and team provisioning, login and session management, multi-factor authentication, and API key/token infrastructure. When authentication fails, customers cannot access the platform or security is compromised—this is mission-critical infrastructure.
Key responsibilities include:
- Owning LaunchDarkly's complete authentication surface end-to-end, from SSO through MFA and API authentication
- Building enterprise identity capabilities for large customers: additional IdP integrations, multi-IdP support per account, and MFA enforcement
- Making the stack operationally excellent: defining SLOs, implementing monitoring for certificate expiry and provisioning failures, creating actionable alerts and runbooks, and maintaining sustainable on-call practices
- Partnering with Product Security on threat modeling, audit logging, and compliance (SOC 2, FedRAMP)
- Setting technical direction for identity systems and mentoring engineers through design review
The tech stack includes Go, TypeScript, CockroachDB, Redis, AWS, and Terraform. You'll work on systems where correctness and availability are non-negotiable, requiring deep backend judgment and a track record of safely evolving critical infrastructure.
Required: 6+ years professional software engineering with significant backend systems work; production experience building or operating authentication/identity systems; proven track record on high-reliability systems with habits around backward compatibility, staged rollouts, and safe cutovers; proficiency in a backend language (Go, Rust, Python, etc.) and cloud infrastructure (AWS or equivalent); strong production ownership including on-call.
Bonus: Protocol depth in SAML, OIDC/OAuth2, or SCIM; integration experience with Okta, Microsoft Entra ID, Google Workspace, OneLogin, or Ping; MFA/WebAuthn, RBAC/authorization policy engines, or multi-tenant audit logging; experience engineering under SOC 2 or FedRAMP compliance.
