Staff Software Engineer, Identity & Access Management

About the Role:

Crusoe is building the world's favorite AI-first cloud, and the Identity & Access Management (IAM) team is the security bedrock our customers trust to run their most demanding AI and GPU workloads. IAM sits on the hot path for every request in the cloud, authorizing millions of requests at single-digit-millisecond latency. We are seeking a Staff Software Engineer to set the technical direction for this platform: the fine-grained authorization model, enterprise SSO and identity federation, multi-tenant organization hierarchies, identity for the agentic-AI era, and credential and secrets management.

As a Staff Engineer, you will own the multi-quarter architecture across these domains, tackle our most ambiguous, highest-blast-radius problems, and operate as a force multiplier, shaping technical strategy and roadmap with security, product, and leadership, and raising the engineering bar through technical leadership and mentorship.

What You'll Be Working On:

• Own IAM Architecture & Direction - Set and own the multi-quarter architecture for the fine-grained authorization model, authentication and federation, and identity lifecycle that secure every request in Crusoe's AI cloud.
• Define Platform-Wide Standards - Own the identity primitives, authorization patterns, and guardrails that keep access control consistent and secure across the entire Crusoe Cloud platform.
• Drive Build-vs-Buy & Framework Decisions - Lead evaluation and adoption of core IAM technologies, making durable, well-reasoned decisions.
• Solve the Hardest, Highest-Risk Problems - Take on ambiguous, high-blast-radius initiatives such as scaling the authorization hot path, multi-tenancy, and tenant isolation, balancing security, reliability, and latency.
• Stay Hands-On - Remain deeply technical: write and review code on the most critical and complex paths, and set the engineering quality bar through your own work.
• Lead Through Influence - Drive cross-team technical alignment, author design reviews and RFCs, and steer execution across multiple teams without direct authority.
• Champion Security at Scale - Lead threat modeling and secure-by-design practices for systems on the critical path of every request.
• Multiply the Team - Mentor senior and mid-level engineers, raise the engineering bar, and shape hiring, onboarding, and technical strategy.

What You'll Bring to the Team:

• Education & Experience - Bachelor's degree in Computer Science or a related field (or equivalent practical experience), 8+ years of software engineering experience building production distributed systems in Go, including significant experience with identity, authorization, or other security-critical systems, and a track record of leading the design of large-scale systems.
• Architectural Leadership - Demonstrated ability to set technical direction and deliver complex, fault-tolerant distributed systems and managed cloud services across multiple teams.
• Deep Security Expertise - Deep mastery of modern authentication and authorization: OIDC, OAuth2, SAML, and JWT / token exchange; RBAC/ABAC and fine-grained / relationship-based authorization; identity federation and IdP integration; SCIM and identity lifecycle; and credential and secrets management, including threat modeling at scale.
• Operational Leadership - Proven ownership of production reliability for hot-path services: defining SLOs, building deep observability, and leading incident response and postmortems. Enterprise security and compliance acumen (e.g., SOC 2), since enterprise SSO customers will drive many of the requirements you set.
• Influence & Communication - Exceptional ability to drive alignment across engineering, security, product, and leadership, and to articulate complex technical trade-offs to any audience.
• Force-Multiplier Mentorship - Proven record of growing senior engineers, improving engineering standards, and influencing hiring and technical strategy.

Bonus Points

• Policy-as-code and modern authorization engines - OPA, Cedar, or Zanzibar-style systems such as SpiceDB and OpenFGA.
• Experience with identity for AI agents and agentic workloads.
• Experience building for or operating GPU / AI cloud infrastructure.
• Enterprise compliance experience beyond SOC 2, such as FedRAMP or other regulated-environment frameworks.

You don't need to check every box. If you bring deep expertise in several of these areas and are excited about this work, we encourage you to apply even if you aren't a 100% skill or experience match.

Benefits:

• Competitive compensation and equity packages
• Restricted Stock Units
• Paid time off, paid holidays & leave of absence programs
• Comprehensive health, dental & vision insurance
• Employer contributions to HSA account
• Paid parental leave
• Paid life insurance, short-term and long-term disability
• Professional development & tuition reimbursement
• Mental health & wellness support
• Commuter benefits (parking & transit)
• Cell phone stipend
• 401(k) Retirement plan with company match up to 4% of salary
• Volunteer time off
• Global travel insurance & emergency assistance
• Daily meals allowance
• Additional perks & programs specific to location

Compensation Range

Compensation will be paid in the range of up to $215,000 - $260,000 + Bonus. Restricted Stock Units are included in all offers. Compensation to be determined by the applicant's knowledge, education, and abilities, as well as internal equity and alignment with market data.

Crusoe is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, disability, genetic information, pregnancy, citizenship, marital status, sex/gender, sexual preference/ orientation, gender identity, age, veteran status, national origin, or any other status protected by law or regulation.