Staff Software Engineer (Identity and Authorization)

Domino's as a Staff Software Engineer, where you'll be the technical anchor for the evolution of our Identity and Access platform. You'll design a unified authorization model, enhance production-grade operations, and create a thoughtful migration path.

About Domino Data Lab

• We value a growth mindset. High-performing creative individuals who dig into problems and see the opportunities for success
• We value all of you that believe improving is always possible At Domino Everything is a work in progress – we can do better at everything
• We believe in individuals who seek truth and speak the truth and can be their whole selves at work
• We strongly believe in the value of growing a diverse team and encourage people of all backgrounds, genders, ethnicities, abilities, and sexual orientations to apply
• We emphasize an environment of teaching and learning to equip employees with the tools needed to be successful in their function and the company

Responsibilities

• You'll also rethink how we model groups and organizational hierarchies, deepen integration with cloud workload identity, and design core identity and access capabilities.
• Additionally, you'll set the architectural direction, bring clarity to complex decisions, and raise the engineering bar.
• Extend a centralized, fine-grained, relationship-based authorization model across the platform, replacing feature-specific permission checks with consistent, reusable primitives.
• Harden the authorization layer for the scale, reliability, and security that enterprise and public-sector customers expect, and make the sequencing and design calls that let us retire legacy access checks without disrupting customers.
• Design core identity and access capabilities, with clean interfaces and flexible abstractions, that engineers across the company can adopt with confidence, and set the architectural direction for identity and access solutions.
• Experience designing a new auth system and migrating to it from a legacy approach (a plus)
• A concrete example of an auth system you helped build that solved a recurring class of customer challenges
• Experience on a platform team supporting other services within a larger engineering organization
• A history of helping teams become better engineers by improving designs, velocity, and quality
• A track record of evolving an enterprise-grade authorization system under real production traffic, with strong opinions about the architecture of these systems
• AI-assisted development: Considered, real-world experience using AI coding tools while maintaining code quality and security rigor

Requirements

• A background at a company that builds authentication or authorization products (a plus)
• System architecture: Experience architecting auth frameworks that scale to enterprise customers
• Authorization systems: Hands-on experience with relationship-based or fine-grained authorization, including schema design (relations, permissions, caveats) and the tradeoffs versus traditional RBAC

Preferred

• Secrets management: Familiarity with a credential management system such as Vault
• Backend engineering: Strong Go, Java, or a comparable language, comfort running services on Kubernetes, and API design instincts from owning a platform others build on
• Cloud identity: Practical experience with workload identity patterns such as AWS IRSA, Azure Workload Identity, or GCP Workload Identity Federation
• Identity protocols: Solid grounding in OIDC and SAML, and ideally experience with an IdP such as Keycloak, Auth0, Okta, or ForgeRock

Pay

USD 250,000 - 280,000

Benefits

• Enjoy benefits such as premium medical, dental, and vision insurance, commuter benefits, flexible paid time off, and annual education reimbursement.