Senior/Staff Security Engineer

The role

You will design and ship code for authentication and authorization architecture. You will build patterns for AI agents and implement application-layer encryption to protect member data.

What you will do

• Own end-to-end authentication and authorization architecture including session management and MFA
• Extend patterns to delegated and agent-based access for AI agents and third parties
• Design and implement application-layer encryption for member documents and data
• Build controls that protect sensitive data in code
• Lead the design process by writing RFCs and running design reviews
• Threat-model identity and data-protection systems and own remediation
• Ground encryption and access-control decisions in regulatory requirements

Required qualifications

• 8+ years of software engineering experience
• Experience building or owning authentication, identity, authorization, or data-protection systems in production
• Strong backend engineering skills in a modern web stack (Python/Django on AWS)
• Deep working knowledge of OAuth 2.0, OIDC, SAML, JWT, and session management
• Practical applied-cryptography literacy including envelope encryption and KMS-based key management
• Security fluency to reason about threats and participate in threat-modeling
• Comfort operating as a senior individual contributor

Nice to have

• Product empathy

Benefits

• Fresh Lunch provided on in-office days
• $150 monthly commuter support for transit expenses
• $200 quarterly health and wellness reimbursement
• Flexible PTO plus 14 company holidays
• 100% medical, dental, and vision for employees
• 75% coverage for dependents
• 16 weeks fully paid parental leave
• 401k plan
• Equity package
• Quarterly virtual events
• Annual in-person summit

About the company

Collective is on a mission to redefine the way businesses-of-one work through technology and a team of trusted advisors. They provide an integrated platform for business incorporation, accounting, bookkeeping, and tax services.