Staff Software Engineer – Customer Identity & Access Management, CIAM

Fastly

Staff engineer designing secure CIAM authentication and authorization services. Fastly’s edge cloud platform delivers fast, secure digital experiences for prominent global customers.

Posted 8/19/2026full-timeSan Francisco • California, Colorado, New York • 🇺🇸 United StatesLead💰 $211,370 - $253,644 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and operating secure, scalable identity services, with a strong focus on authentication and authorization systems. Proven ability to lead technical initiatives, mentor engineers, and collaborate effectively with cross-functional teams.

Highest-signal resume keywords

Authentication And Authorization SystemsOIDC, OAuth, SAML, SCIM, JWT, SSOSoftware Architecture And System DesignTechnical LeadershipGo, Java, Or Ruby

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Identity Lifecycle ManagementService-To-Service AuthenticationSecure Communication PatternsScalabilityPerformanceReliabilitySecurity Best PracticesRole-Based Access ControlAttribute-Based Access ControlTechnical Documentation

Soft Skills

Written CommunicationVerbal CommunicationMentoringCollaborative Problem Solving

Tools & Technologies

Keycloak

Industry Keywords

CIAMIdentity ServicesStandards-Based Identity PatternsOn-Call SupportInclusive Engineering Culture

Tech Stack

Tools & technologies

Distributed SystemsGoJavaRuby

About the role

Key responsibilities & impact

Design and build secure, scalable identity services supporting authentication, authorization, identity lifecycle, and related platform capabilities
Lead complex technical initiatives from design through production
Serve as technical lead for core CIAM platform areas
Guide architecture and review designs
Help teams make sound technical decisions
Partner with engineering, product, and security teams on implementation plans and technical investments
Identify risks early and break down ambiguous technical problems into incremental solutions
Promote standards-based identity patterns and engineering best practices
Improve reliability, security, and maintainability of identity-related services
Mentor CIAM engineers through design reviews, technical guidance, and collaborative problem solving
Contribute to an inclusive engineering culture
Participate in on-call support rotation as needed

Requirements

What you’ll need

Significant experience designing and operating authentication and authorization systems in production environments
Staff-level engineers typically have 7+ years of relevant experience
Deep understanding of OIDC, OAuth, SAML, SCIM, JWT, and SSO
Experience with service-to-service authentication and secure communication patterns in distributed systems
Strong background in software architecture and system design, including scalability, performance, reliability, and security
Demonstrated technical leadership across multiple teams
Strong written and verbal communication skills
Ability to produce clear technical documentation and align diverse stakeholders
Availability during core business hours and occasional nights and weekends for on-call coverage
Preferred: experience with Go, Java, or Ruby
Preferred: experience with Keycloak
Preferred: production experience implementing role- and attribute-based access control systems
Preferred: experience designing secure identity systems considering authentication threats, authorization models, and operational resilience

Benefits

Comp & perks

Medical, dental, and vision insurance
Family planning support
Mental health support
Employee Assistance Program
Life, disability, and accident insurance
Flexible Vacation policy
Up to 18 days of accrued paid sick leave
401(k) with company match
Employee Stock Purchase Program
11 paid local holidays in 2026
12 paid company wellness days
Equity program eligibility
Discretionary bonus program eligibility
Hybrid work flexibility
Quarterly travel opportunities to align on technical designs and direction