Staff Software Engineer (Customer Identity & Access Management (CIAM))

• Join our dynamic Customer Identity Access Management (CIAM) team as a Staff Software Engineer and play a pivotal role in building cutting-edge solutions that centralize and simplify how organizations manage user identities and profile data
• Our CIAM team is committed to empowering customers with control over user access by providing advanced access control mechanisms, innovative authentication methods, progressive profiling, and a unified identity experience
• We are looking for passionate, highly skilled software engineers to join our team and be an integral part of our mission
• If you’re eager to make a significant impact and contribute to the growth of a thriving CIAM ecosystem, we would love to have you on board
• Let’s build something remarkable together!
• Design and build secure, scalable identity services supporting authentication, authorization, identity lifecycle, and related platform capabilities
• Lead implementation of complex technical initiatives from design through production, balancing long-term architecture with practical delivery
• Serve as the technical lead for one or more core areas of the CIAM platform, guiding architecture, reviewing designs, and helping teams make sound technical decisions
• Partner with engineering, product, and security to shape implementation plans, prioritize technical investments, and identify risks early
• Break down ambiguous technical problems into practical, incremental solutions while maintaining a high bar for engineering quality
• Champion modern, standards-based identity patterns and help teams adopt engineering best practices across the CIAM platform
• Improve the reliability, security, and maintainability of identity-related services through strong architectural decisions and operational rigor
• Mentor engineers within the CIAM organization through design reviews, technical guidance, and collaborative problem solving
• Contribute to an inclusive engineering culture grounded in curiosity, pragmatism, and continuous improvement
• Participate in on-call support rotation as needed

Benefits

• Parental support and beyond: We support our families by offering generous time off for parental leave. And beyond that, we work hard to build a culture that allows for all employees to have the life outside work that they desire year round.
• Health and wellness:
  Your well-being matters here. Our health plans offer a variety of options, including full medical, dental, and vision coverage, short- and long-term disability insurance, mental health resources, and more.
• Invest in your future:
  We offer 401(k)/retirement plans, employee stock purchasing plans (ESPP), and reimbursements for learning and development programs — so we can support your ongoing growth and success.
• Keep learning and growing: Helping people go further means nurturing their talent. Through annual reimbursements for employee learning activities, regular hangouts and advice from our Senior Staff, talks from industry leaders, and cultural events — we offer tons of opportunities for people to learn. And we’re always looking to grow as a company, too: we collect employee engagement and experience data annually and leverage our Employee Experience Champion Network to understand employee feedback, so we can keep improving.

• Significant experience designing and operating authentication and authorization systems in production environments. Staff engineers at Fastly typically have 7+ years of relevant experience
• Strong written and verbal communication skills, including the ability to produce clear technical documentation and align diverse stakeholders
• Experience with service-to-service authentication and secure communication patterns in distributed systems
• Deep understanding of identity and access standards and technologies such as OIDC, OAuth, SAML, SCIM, JWT, and SSO
• Strong background in software architecture and system design, especially in areas of scalability, performance, reliability, and security
• Demonstrated ability to provide technical leadership across multiple teams through architectural guidance, delivery of complex initiatives, and collaborative influence
• Experience with Go, Java, or Ruby
• Experience with Keycloak
• Production experience implementing Role and Attribute-based Access control systems
• Experience designing secure identity systems with strong consideration for authentication threats, authorization models, and operational resilience

• Anticipated Posting Close Date*: 09/17/2026