Docker - Senior Software Engineer, IAM
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT
Requirements
• 6+ years of backend software engineering experience building and operating production services • Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent practical experience • Strong proficiency in Go, including building and operating services in production • Solid working knowledge of PostgreSQL - schema design, query performance, migrations, and operating Postgres under real load • Experience with gRPC and event-driven systems using Kafka (or comparable) • Kafka • Strong understanding of core identity and security concepts: OAuth2, OIDC, SAML, JWT, token lifecycle, and session management • OAuth2 • Experience with authorization models, including RBAC and ReBAC-style approaches • authorization models • ReBAC • Track record of designing and operating distributed systems where reliability, security, and correctness are first-class concerns • Willingness and ability to participate in an on-call rotation for services on the critical request path • Excellent written and verbal communication skills in a remote, async-first environment • Production experience with SCIM provisioning and enterprise SSO integrations • Hands-on experience with Auth0 or similar identity platforms • Auth0 • Experience building or operating multi-region services and understanding the tradeoffs involved • multi-region • Exposure to compliance frameworks relevant to identity (SOC 2, ISO 27001, GDPR) • Experience with audit logging at scale, or with building identity primitives for machine / workload identities • What to Expect • What to Expect • First 30 Days • First 30 Days • Get to know the team, our services, and the identity domain at Docker • Pair with engineers across the IAM stack and ship your first changes to production • Get comfortable with our Go services, Postgres schemas, CI/CD, and on-call practices • First 90 Days • First 90 Days • Own a meaningful component or workstream end-to-end • Contribute to technical design discussions on auth, tokens, or enterprise identity • Build strong working relationships with Product, Security, and partner engineering teams • Begin participating in the on-call rotation with support from the team • First Year • First Year • Be a trusted technical leader within IAM, owning a functional area of the platform • Lead delivery of significant identity initiatives and shape the direction of the IAM roadmap • Improve reliability, security, and developer experience of the identity primitives other Docker teams depend on • Mentor teammates and raise the bar on engineering practices across the team • Docker considers sponsorship on a case-by-case basis based on business needs.
Responsibilities
• Design, build, and operate Go services powering authentication, authorization, token handling, and identity lifecycle across Docker • Extend OIDC, SSO, SAML, and SCIM integrations, and evolve our authorization model (including ReBAC) as permissions scale across products and tenants • ReBAC • Improve observability, performance, and security posture of identity services on the hot path of every authenticated request, and strengthen audit logging • audit logging • Design for multi-region operation, graceful degradation, and safe rollout of changes to critical auth flows • multi-region • Lead projects end-to-end, contribute to technical design and long-term direction of the IAM platform, and mentor teammates in identity and security domains • Partner with Product, Security, and engineering teams that depend on IAM primitives to ensure our APIs are clear, safe, and easy to adopt • Take part in the paid on-call rotation for the team; respond to incidents, debug production issues, and drive continuous improvement of system reliability • What You'll Work On • What You'll Work On • Beyond steady-state ownership of our identity services, you’ll help shape the next phase of Docker’s IAM platform, including evolving our authorization model for fine-grained, cross-product access, expanding support for enterprise identity integrations, and improving the reliability and observability of systems on the critical request path.
Benefits
• Freedom & flexibility; fit your work around your life • Designated quarterly Whaleness Days plus end of year Whaleness break • 16 weeks of paid Parental leave • Technology stipend equivalent to $100 net/month • PTO plan that encourages you to take time to do the things you enjoy • Training stipend for conferences, courses and classes • Equity; we are a growing start-up and want all employees to have a share in the success of the company • Medical benefits, retirement and holidays vary by country • Remote-first culture, with offices in Seattle and Paris • Docker embraces diversity and equal opportunity. We are committed to building a team that represents a variety of backgrounds, perspectives, and skills. The more inclusive we are, the better our company will be.
No credit card. Takes 10 seconds.