Description
Brex is the intelligent finance platform that enables companies to spend smarter and move faster in more than 200 markets.
By combining global corporate cards and banking with intuitive spend management, bill pay, and travel software, Brex enables founders and finance teams to accelerate operations, gain real-time visibility, and control spend effortlessly.
The Identity and Access Management team builds and maintains secure, user-friendly authentication and authorization systems that protect users, safeguard company assets, and provide a seamless access experience for developers.
As a Staff Engineer on IAM, you will lead projects and initiatives to improve the security, reliability, and developer experience of our authentication, authorization, and identity platforms for customers, partners, and internal systems.
Responsibilities:
- Design, build, and operate backend systems and APIs for authentication, authorization, identity context, and audit-related workflows.
- Lead engineers across the organization on initiatives end to end, from technical design and implementation through rollout, measurement, and operational support.
- Improve login and access experiences across SSO, MFA, step-up authentication, delegated access, and enterprise identity flows.
- Build and extend authorization systems that support custom roles, resource-aware access control, and secure defaults for product teams.
- Lead creation of durable, identity-aware audit trails and attribution for user, service, delegated, and agent-driven actions.
- Partner closely with engineers across Brex to make IAM integrations secure by default and easier to adopt through clear patterns, tooling, and shared libraries.
- Mentor engineers on the team to deliver high-quality code and produce operational improvements that raise the bar for reliability and maintainability across the team’s systems.
Requirements:
- You have strong software engineering fundamentals and experience building reliable production backend systems.
- You have experience leading complex projects and mentoring other engineers.
- You have strong API design fundamentals, rigor around testing, code quality, and documentation.
- You understand core IAM concepts such as authentication, authorization, sessions, tokens, MFA, SSO, OAuth, SAML, OIDC, or RBAC.
- You communicate clearly, collaborate well across teams, and are effective in cross-functional technical discussions.
- You care about operational excellence and know how to improve system reliability, reduce toil, and maintain high-quality services over time.
- You have strong product and engineering judgment and can balance security, usability, and developer experience.
Bonus points:
- You have worked on identity and access management, authentication, authorization, or audit systems in a production environment.
- You have hands-on experience with Okta, Oso, SSO, SAML, OIDC, OAuth, or WebAuthn.
- You have experience building enterprise-facing admin controls, authorization platforms, delegated access flows, or audit trails.
- You have worked on platform teams that provide shared infrastructure, paved roads, or secure-by-default frameworks for other engineering teams.
The expected salary range for this role is $240,000 - $300,000 CAD.