Senior Software Engineer, Cloud Identity
Temporal Technologies · United States
- Hybrid
- Full-time
- $237,000 / year
- United States
Job highlights
- Design, build, operate identity systems for SaaS.
- Handle authentication, authorization, and workload identity.
- Integrate with enterprise identity providers.
- Ensure fast, reliable, secure auth paths.
- Collaborate across security, product, engineering.
About the role
About Us
Temporal is an open source programming model that can simplify code, make applications more reliable, and help developers focus on the important things like delivering features faster. We are on a mission to be the reliable foundation of every developer’s toolbox, and are building the team that will make that happen.
Our values guide us —they are present in how we show up, make decisions, and work together to make an impact. We’re curious, driven, collaborative, genuine and humble.
Temporal is growing and we are looking for those who share our values, challenge 'standard' thinking, and want to influence our future. If you have a passion for improving the developer experience, building world-class open-source software and communities, and want to be a part of our amazing team, we'd love to hear from you!
Summary
Temporal is hiring a Senior Software Engineer for Identity to help design, build, and operate the identity and access systems behind Temporal Cloud — a multi-tenant SaaS platform. You'll work on the systems that authenticate users and workloads, authorize access to namespaces and APIs, and integrate with customer identity providers. You'll partner with Security, Product, and infrastructure teams to deliver "secure by default" capabilities while keeping the developer and operator experience strong.
What You'll Do
- Build and improve core parts of Temporal Cloud's identity platform — authentication (OAuth 2.0/OIDC, SAML), authorization (RBAC and policy-based access), and workload identity — so customers and workloads can authenticate securely
- Help keep the auth path fast and reliable to meet Temporal Cloud's SLOs through caching, token handling, and revocation strategies
- Integrate with enterprise identity providers (Okta, Entra ID, Google Workspace) and support user provisioning (SCIM), with attention to common identity threats such as token replay and privilege escalation
- Partner with Security, Product, and platform teams to ship secure-by-default patterns and contribute to IAM lifecycle and audit practices
- Write clear architecture and design docs, and contribute to the team's technical direction
What You'll Bring
- Solid hands-on experience building and operating production identity or auth systems — OAuth 2.0/OIDC, SAML, JWT, and token/key rotation
- Good understanding of authorization models (RBAC, ABAC); familiarity with policy engines like OPA, Cedar, or OpenFGA is a plus
- Experience operating distributed systems in production, including some on-call responsibility
- Proficiency in Go; experience with Python, Java, or Rust is a plus
- Strong communication skills and the ability to collaborate across security, product, and engineering teams
Nice to Have
- Exposure to workload identity or short-lived / federated credentials (SPIFFE/SPIRE, mTLS, WIF)
- Experience with SCIM provisioning and enterprise SSO integrations
- Contributions to identity OSS projects (Keycloak, Ory, Dex, OpenFGA, SPIRE)
- Familiarity with compliance frameworks (SOC 2, ISO 27001, HIPAA) as they apply to IAM
- Familiarity with Temporal or other durable-execution engines, especially auth implications around workers and task queues
- Experience designing customer-facing API auth (scoped tokens, API keys, rotation)
Compensation
Base Salary Range - $212,000 to $237,000, depending on qualifications and location
Equity Options - Eligible for stock options as part of Temporal's equity plan
Compensation ranges reflect salary and commission compensation (when applicable) across several geographic markets. Employment offers carefully consider multiple factors, including prior experience, knowledge, expertise, skillset, market location, and job level assessed during the interview process.
Employee benefits and perks below are for full-time employees, part-time or temporary positions are excluded.
U.S. Benefits
- Unlimited PTO, 12 Holidays + 2 Floating Holidays
- 100% Premiums Coverage for Medical, Dental, and Vision
- AD&D, LT & ST Disability, and Life Insurance (Standard & Supplemental Available)
- Empower 401K Plan
- Additional Perks for Learning & Development, Lifestyle Spending, In-Home Office Setup, Professional Memberships, WFH Meals, Internet Stipend and more!
International Benefits
Paid Time Off (PTO) and Benefits outside the United States vary by country, and are issued in partnership with Remote.com. Additionally, Temporal offers perks to all international employees for learning & career development, a lifestyle spending account, in-home office setup (in addition to company-issued hardware), professional memberships, work-from-home meals, and access to the Calm app for mental wellness.
Travel
Temporal is a globally distributed, collaborative team that values opportunities for in-person connection. Occasional travel may be required for company events, team offsites, and other meaningful moments that bring us together.
Additional Perks
- $3,600 / Year Work from Home Meals
- $1,800 / Year Professional Enrichment (Career Development & Professional Memberships)
- $1,200 / Year Lifestyle Spending Account
- $1,000 / Year In-Home Office Setup (In addition to Temporal issued equipment - laptop, monitor, keyboard, mouse, trackpad, and extension power cable at no cost to you)
- $74 / Month Reimbursement for Internet
- Calm App Subscription for Mental Health & Wellness
Equal Opportunity Employer
Temporal Technologies is an Equal Opportunity Employer. Temporal Technologies does not discriminate on the basis of race, religion, color, sex, gender identity, sexual orientation, age, non-disqualifying physical or mental disability, national origin, veteran status, or any other basis covered by appropriate law. All employment is decided on the basis of qualifications, merit, and business need. We embrace and celebrate differences and diversity.
Temporal is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. If you need to request a reasonable accommodation, please let your Recruiter know so we can assist.
We are not working with external recruitment agencies, thanks.
Key skills/competency
- Senior Software Engineer, Cloud Identity
- Identity and Access Management (IAM)
- Authentication (OAuth, OIDC, SAML)
- Authorization (RBAC, ABAC)
- Distributed Systems
- Go Programming Language
- Cloud Security
- SaaS Platforms
- Enterprise Identity Providers
- Open Source Software
Skills & topics
- Senior Software Engineer
- Cloud Identity
- Identity and Access Management
- IAM
- Authentication
- Authorization
- OAuth
- OIDC
- SAML
- Go
- Distributed Systems
- SaaS
- Cloud Security
- Software Development
- Engineering
How to get hired
- Tailor your resume: Highlight experience with identity systems, OAuth, SAML, Go, and distributed systems.
- Craft a strong cover letter: Emphasize your passion for developer experience and open-source.
- Prepare for technical interviews: Be ready to discuss system design, authentication, and authorization.
- Showcase collaboration skills: Provide examples of working with cross-functional teams.
- Research Temporal's values: Align your application with their culture of curiosity and collaboration.
Technical preparation
Behavioral questions
Frequently asked questions
- What specific identity and access management technologies are most important for the Senior Software Engineer, Cloud Identity role at Temporal Technologies?
- For the Senior Software Engineer, Cloud Identity role at Temporal Technologies, key technologies include OAuth 2.0/OIDC, SAML, JWT, and expertise in token/key rotation. A strong understanding of authorization models like RBAC and ABAC is also crucial. Familiarity with policy engines (OPA, Cedar, OpenFGA) and enterprise identity providers (Okta, Entra ID, Google Workspace) is highly valued.
- What is the expected level of experience with distributed systems for this Senior Software Engineer position?
- The role requires solid experience operating distributed systems in production. This includes being comfortable with the challenges of running such systems, managing their reliability, and likely participating in on-call rotations to ensure high availability.
- How does Temporal Technologies approach remote work and team collaboration for its globally distributed engineering teams?
- Temporal is a globally distributed team that values in-person connection. While primarily remote, occasional travel is expected for company events and team offsites to foster collaboration and strengthen relationships among team members.
- What are the key benefits and perks offered to full-time employees at Temporal Technologies, particularly for remote international employees?
- Full-time employees in the U.S. receive unlimited PTO, 100% premium coverage for health benefits, and a 401K plan, along with numerous additional perks. International employees receive PTO and benefits via Remote.com, plus additional perks for professional development, home office setup, and wellness.
- Does Temporal Technologies work with external recruitment agencies for hiring the Senior Software Engineer, Cloud Identity role?
- No, Temporal Technologies explicitly states that they are not working with external recruitment agencies for this hiring process. All applications and inquiries should be directed through their official channels.
- What programming languages are preferred for the Senior Software Engineer, Cloud Identity role at Temporal?
- Proficiency in Go is a primary requirement for this role. Experience with other languages such as Python, Java, or Rust is considered a plus and would be beneficial for the candidate.
- How does Temporal Technologies ensure a 'secure by default' approach in its cloud identity systems?