Staff Software Engineer (Identity & Access Management)
Posted Updated
- As a Staff Software Engineer within our SPACE org (Security, Privacy, Assurance, and Corporate Engineering), you will play a critical role on the Identity & Access Management (IAM) team
- In this role, you will design, deliver, and support the lifecycle of digital identities, authentication, and access across Reddit
- You will partner closely with cross-functional teams to build creative, scalable solutions that align with business priorities and strict regulatory standards
- We operate in a dynamic, ambiguous problem space—meaning you’ll work across multiple domains and technology stacks to keep Reddit secure
- Some of our present and future challenges include:
- Modernizing our identity infrastructure by replacing legacy systems with a tailored governance platform
- Provide self-service identity management lifecycle and natural language explanation of existing systems in order to improve employee experience with security systems
- Integrate Reddit’s corporate identity stack across a variety of protocols like SCIM and SAML, and across a variety of use cases (MCP and Agentic, resource automation that includes identity requirements) and increase Reddit’s maturity with “just-in-time” access and advanced identity constructs
- What You’ll Do:
- Engineering & Integration: Develop, scale and maintain Reddit’s core IAM internal identity capabilities, platforms and infrastructure. Design and deploy high-quality API integrations and custom enterprise IGA connectivity solutions
- Observability & Data Analytics: Build proactive monitoring frameworks, executive-friendly dashboards, and advanced alerting. Use synthetic transactions and anomaly detection to measure system availability (aiming for multiple 9s). Utilize identity data to track license utilization, aid in fiscal planning, and drive platform adoption
- Process & Compliance: Create and maintain documentation, audit logs, and reports to continuously improve business processes and ensure seamless compliance execution
- Operations & Support: Troubleshoot complex production incidents, analyze failure conditions, and perform root-cause analysis to support a 24x7 operation
- Collaboration & Mentorship: Guide global, cross-functional partners on IAM best practices while raising the engineering bar through code reviews, technical standards, and optimized workflows
- Technologies we use:
- Our teams leverage a diverse and modern technology stack. While specific technologies may vary by team, we generally work with:
- Languages: Go, Python, Java, TypeScript, SQL
- Datastores: Postgres, Directory architectures (e.g., LDAP)
- Tools: Docker, Kubernetes, AWS, SailPoint, Okta
Benefits
- Comprehensive health benefits
- Flexible vacation & Reddit global days off
- Family planning funds & 4+ months paid parental leave
- Personal & professional development funds
- Paid volunteer time off
- Workspace & home office benefits
- 10+ years of backend development experience across multiple layers of the stack—from databases and networking to efficient computing
- Ability to design and implement complex distributed systems operating under high load
- Proficiency in our core stack: Go, Python, Java, or TypeScript, with a strong DevOps mindset and end-to-end code ownership (testing, monitoring, deploying, and maintaining)
- In-depth knowledge of corporate IAM experience covering the full workforce identity lifecycle (Joiner, Mover, Leaver, Access Requests, and Certifications)
- Deep understanding of modern authentication protocols (OAuth, OIDC, SAML) and secure-by-design principles
- Hands-on familiarity with enterprise identity solutions including IGA, MFA, PAM / PIM, JIT and Directory architectures (e.g., Okta, LDAP, SailPoint)
- Familiarity with governance and compliance frameworks (SOC2, SOX, PCI), including driving audit-related access certification reviews
- Strong collaborative communicator thriving in Agile environments, with a continuous learning mindset and a resourceful, “can-do” approach to complex problem-solving
- You embody our company value of Evolve: you view challenges as learning opportunities and continuously seek to improve
