Member of Technical Staff (Software Engineer, Enterprise Trust & Governance)

The Enterprise Trust & Governance team builds the control plane that lets the world's largest organizations deploy Perplexity broadly and with confidence.

This is a product and platform engineering role with end-to-end ownership, from shaping the architecture and policy models to shipping the experiences our customers' administrators and security teams use every day.

Key Responsibilities

• Own enterprise identity and provisioning, including SSO (SAML/OIDC), SCIM, WorkOS integrations, and support for identity providers such as Okta and Microsoft Entra ID.
• Build the permissions platform, with fine-grained roles and permissions for connectors, tool actions, models, and model effort levels, enforced consistently across products and agent workflows.
• Design and ship secure, well-documented admin APIs for audit logs, members, groups, roles, and settings.
• Build policy controls for model and feature availability, staged rollouts, model deprecations, usage and spend limits, alerts, and cost-center allocation.
• Build admin-facing analytics for adoption, usage, spend, and policy enforcement, helping organizations measure value and manage their deployments.
• Deliver audit logs and change notifications that help administrators investigate activity, track configuration changes, and support compliance.
• Set the technical bar for authorization correctness and reliability, with fast, consistent, explainable permission checks, well-defined failure behavior, and strong tenant isolation.
• Partner with Product, Design, Security, Sales, and Customer Success to translate complex enterprise requirements into reusable platform capabilities and intuitive admin experiences.

Qualifications

• 4+ years of software engineering experience, with a track record of owning complex backend systems from design through production operation.
• Strong system design skills, including building reliable, scalable, multi-tenant SaaS platforms with clear security and isolation boundaries.
• Strong proficiency in a backend language such as Python, Go, or Rust, and hands-on experience with cloud infrastructure such as AWS and Kubernetes.
• Deep expertise in at least one of the following:
• Enterprise identity and provisioning, including OAuth, OIDC, SAML, and SCIM.
• Permissions platforms, fine-grained authorization, and policy enforcement.
• Encryption, customer-managed keys, and key lifecycle management.
• Enterprise admin platforms, audit infrastructure, or usage and spend analytics.
• Experience building or integrating enterprise identity and access systems, including platforms such as WorkOS, Okta, or Microsoft Entra ID.
• Sound technical judgment in security-sensitive systems, balancing threat models, authorization correctness, and failure behavior with usability and delivery speed.
• A track record of leading ambiguous, cross-team initiatives from architecture through adoption, setting technical direction for shared platforms, and raising engineering quality through mentorship.