BambooHR

BambooHR

Staff Software Engineer

Utah | Remote · Staff+ · Contract

Sponsorship not specifiedDetected 15 days ago
PHPExpressOAuthOpenAPIHRISZero TrustLeadershipCommunicationPublic Speaking

About the role

  • Please Note: This is a remote position available in the state listed on this job.
  • Additionally, employment with BambooHR is contingent on passing both a background and credit check.
  • We're leaning into intelligent tools to streamline our workflows, giving us more time for high-impact innovation.

Responsibilities

  • Drive the delivery of the architecture and delivery of a new permission service - from first design doc to production, including data model, policy evaluation engine, enforcement APIs, and token contract
  • Drive token strategy - JWT issuance, rotation, scoping, revocation, and the relationship between tokens and permissions across both human and machine (API/agent) callers
  • Partner with product and platform teams to translate domain-specific access control requirements into reusable permission primitives that scale across the organization
  • Lead architectural reviews for features with AuthN/AuthZ implications; catch design debt before it ships
  • Collaborate with Security and Compliance to ensure the permission service meets audit, least-privilege, and zero-trust requirements

Requirements

  • 10+ years of software engineering experience, with at least 3 years operating at Staff or Principal level
  • Experience designing or reviewing OpenAPI specifications, event-driven architectures, and cross-service communication patterns in a service-oriented or microservice environment
  • comfort working in a PHP monolith with modern architectural patterns

Skills

  • Experience with fine-grained authorization patterns (relationship-based access control, contextual policies, delegated permissions)
  • Background in multi-tenant SaaS - understanding how permission models must account for org hierarchy, role inheritance, and tenant isolation
  • Experience with secrets management, certificate rotation, or secure credential storage in production environments
  • Familiarity with zero-trust architecture principles and how they apply to internal service-to-service authorization
  • A Great Company Culture that has been recognized by multiple organizations like Inc, and Salt Lake Tribune
  • Comprehensive health, life, and disability insurance
  • 401k plans with up to 6% company match
  • $2000 Paid-Paid Vacation bonus
  • EAP through Headspace
  • Check out all our benefits that benefit you

Company info

  • At BambooHR, we're building something different: we're building a people intelligence platform that transforms HR and sets people free to do great work!
  • We're a proven market leader driving innovation while building lasting success through thoughtful, sustainable growth.
  • Here, you'll find a place that champions growth: both professional and personal, both individual and collective.
  • We invest in potential, giving you the space to stretch your capabilities and turn good ideas into reality while providing the safety net of a supportive, values-driven culture.
  • Our approach combines meaningful work with meaningful lives, offering competitive benefits, professional development, and the flexibility to thrive both in and outside the office.
  • What sets us apart isn't just what we do, but how we do it: with openness, integrity, and a shared commitment to doing the right thing.
  • Join us in creating HR software that makes work better for everyone, while we make work better for you.
  • BambooHR is committed to the full inclusion of all qualified individuals and will ensure that persons with disabilities are provided reasonable accommodations throughout the hiring process.
  • If you would like to request accommodations, please let your recruiter know.
  • BambooHR is An Equal Opportunity Employer--M/F/D/V
  • Because our team members are trusted to handle sensitive information, we require all candidates that receive and accept employment offers to complete a background check before being hired.
  • Our process utilizes AI as an assistant to efficiently process and analyze candidate data.
  • Recruiters and hiring managers maintain full oversight and accountability, ensuring that all final selection and rejection decisions are human-made and based solely on objective job qualifications.
  • See our AI Guidelines for Candidates for details on how BambooHR uses AI in recruiting, how we expect candidates to use AI, and what is not allowed.
  • with openness, integrity, and a shared commitment to doing the right thing.

This listing is sourced directly from BambooHR's careers page and normalized into a canonical job model.