Senior Software Engineer, Identity & Access

The role

You will build the authentication, authorization, and access control layer for the platform. This includes owning enterprise sign-on, RBAC, provisioning, and access governance.

What you will do

• Deliver SSO across OIDC and SAML.
• Build role-based access control with fine-grained, query-time enforcement.
• Deliver SCIM provisioning and directory sync.
• Build token exchange, on-behalf-of flows, service accounts, and domain-wide delegation.
• Build entitlements, session and token management, and controls for access governance.

Required qualifications

• 4+ years building backend systems, with significant time spent on identity, authentication, or authorization.
• Real depth in OIDC, OAuth2, SAML, token exchange, and multi-tenant RBAC.
• Built or owned enterprise SSO and identity systems.
• Strong grasp of identity-provider architecture and enterprise auth patterns.
• Strong in Python and modern backend frameworks (FastAPI or similar).

Nice to have

• SCIM and directory sync at scale.
• Authorization frameworks and policy engines (OPA, Cedar, or Zanzibar-style systems).
• Entitlements, usage-based metering, or billing systems.
• Multi-tenant SaaS at scale.
• Startup or growth-stage experience.

About the company

StackAI (by Asana) is a no-code AI workflow platform that empowers companies to build, deploy, and scale AI-powered workflows easily. It is an Asana Company building the foundational platform for the AI-driven future of work.