Domino’s Identity and Access platform (IDSM) is the foundation for how customers in some of the world’s most regulated industries manage who can see and do what. We’re evolving it into a centralized, relationship-based authorization framework built on SpiceDB, and you’d be the technical anchor for its next phaseProduction-grade operations. Harden the authorization layer for the scale, reliability, and security that enterprise and public-sector customers expectMake the sequencing and design calls that let us retire legacy access checks without disrupting customers along the wayGroups and organizations that mirror real customers. Deepen integration with cloud workload identity, starting with AWS IRSA and extending to Azure and GCP equivalentsFoundations other teams build on. Design core identity and access capabilities, with clean interfaces and flexible abstractions, that engineers across the company can adopt with confidenceA stronger way of building. Set the patterns for how the team uses AI-assisted development to ship high-quality features faster, without compromising security or code qualitySet the architectural direction. Design identity and access solutions that meet customer demands for managing user and group access, and are secure, scalable, and built on primitives teams can reuseArticulate the architecture clearly enough that the rest of Engineering can rally around itEngineers and teams building on IDSM will bring their auth questions to you, and your technical judgment will carry real influenceRaise the engineering bar. Lead design reviews, unblock engineers facing ambiguity, and champion flexible abstractions and well-thought-out interfacesIncrease velocity and reduce maintenance. Improve our architecture, including removing tech debt, so the team ships faster with less ongoing maintenanceShape how we build with AI.



Establish patterns for using AI-assisted development to deliver high-quality features faster without compromising security or rigorHelp the team know what to build and value both quality and speed of iteration and contribute to experiences that make identity and user management easier for the enterprises we servePremium medical, dental, and vision insurance plans, including a free option for you and your familyWe support your daily commute, whether Uber, Lyft, bus, or trainNew parents receive up to eight weeks of fully paid-parental leave. Got baby pics? Share them in our Slack channel dedicated to kidsFlexible paid time off: Pursue the professional growth that will help you excel in your role with educational opportunities that work for your needs, and at your speedExperience designing a new auth system and migrating to it (a plus)A background at a company that builds authentication or authorization products (a plus)A track record of evolving an enterprise-grade authorization system under real production traffic, with robust opinions about the architecture of these systemsA concrete example of an auth system you helped build that solved a recurring class of customer challengesSystem architecture: Solid grounding in OIDC and SAML, and ideally experience with an IdP such as Keycloak, Auth0, Okta, or ForgeRockAI-assisted development: Considered, real-world experience using AI coding tools while maintaining code quality and security rigorBackend engineering: Strong Go, Java, or a comparable language, comfort running services on Kubernetes, and API design instincts from owning a platform others build onSecrets management: Familiarity with a credential management system such as VaultA history of helping teams become better engineers by improving designs, velocity, and qualityExperience on a platform team supporting other services within a larger engineering organizationAuthorization systems: Practical experience with workload identity patterns such as AWS IRSA, Azure Workload Identity, or GCP Workload Identity FederationHigh-performing creative individuals who dig into problems and see the opportunities for success

📌 Staff Software Engineer Architecture (Ottawa)
🏢 Domino Data Lab
📍 Ottawa