Staff Software Engineer, Identity & Access Management

Overview

As a Staff Software Engineer within our SPACE org (Security, Privacy, Assurance, and Corporate Engineering), you will play a critical role on the Identity & Access Management (IAM) team.

In this role, you will design, deliver, and support the lifecycle of digital identities, authentication, and access across Reddit. You will partner closely with cross-functional teams to build creative, scalable solutions that align with business priorities and strict regulatory standards.

Challenges Include:

• Modernizing identity infrastructure by replacing legacy systems with a tailored governance platform.
• Providing self-service identity management lifecycle and natural language explanation of existing systems to improve employee experience.
• Integrating Reddit’s corporate identity stack across protocols like SCIM and SAML, across multiple use cases (MCP and Agentic, resource automation with identity requirements), and increasing maturity with just-in-time access and advanced identity constructs.

What You'll Do

• Engineering & Integration: Develop, scale, and maintain Reddit’s core IAM internal identity capabilities, platforms, and infrastructure. Design and deploy high-quality API integrations and custom enterprise IGA connectivity solutions.
• Observability & Data Analytics: Build proactive monitoring frameworks, executive-friendly dashboards, and advanced alerting. Use synthetic transactions and anomaly detection to measure system availability. Utilize identity data to track license utilization, aid in fiscal planning, and drive platform adoption.
• Process & Compliance: Create and maintain documentation, audit logs, and reports to continuously improve business processes and ensure seamless compliance execution.
• Operations & Support: Troubleshoot complex production incidents, analyze failure conditions, and perform root-cause analysis to support a 24x7 operation.
• Collaboration & Mentorship: Guide global, cross-functional partners on IAM best practices while raising the engineering bar through code reviews, technical standards, and optimized workflows.

What We Are Looking For

• 10+ years of backend development experience across multiple layers of the stack—from databases and networking to efficient computing.
• In-depth knowledge of corporate IAM experience covering the full workforce identity lifecycle (Joiner, Mover, Leaver, Access Requests, and Certifications).
• Ability to design and implement complex distributed systems operating under high load.
• Proficiency in our core stack: Go, Python, Java, or TypeScript, with a strong DevOps mindset and end-to-end code ownership (testing, monitoring, deploying, and maintaining).
• Deep understanding of modern authentication protocols (OAuth, OIDC, SAML) and secure-by-design principles.
• Hands-on familiarity with enterprise identity solutions including IGA, MFA, PAM / PIM, JIT and Directory architectures (e.g., Okta, LDAP, SailPoint).
• Familiarity with governance and compliance frameworks (SOC2, SOX, PCI), including driving audit-related access certification reviews.
• Strong collaborative communicator thriving in Agile environments, with a continuous learning mindset and a resourceful approach to complex problem-solving.