Docker, Inc

Docker, Inc

Senior Software Engineer, IAM

Canada · Senior

Sponsorship not specifiedDetected 85 days ago
GoDistributed SystemsPostgreSQLAWSDockerCI/CDgRPCKafkaOAuthAgentic AICybersecurityComplianceAccount ManagementCommunication

About the role

  • Docker has been one of the most loved brands in developer tooling, trusted by more than 20 million monthly users and over 20 billion container image pulls.
  • As AI agents redefine software development, Docker is at the center of that shift, providing the sandboxed environments, verified images, and secure infrastructure that make autonomous workflows trustworthy by default.
  • Every authenticated request to Docker depends on these services-making their correctness, latency, and security foundational to customer trust.

Responsibilities

  • Design, build, and operate Go services powering authentication, authorization, token handling, and identity lifecycle across Docker
  • Design for multi-region operation, graceful degradation, and safe rollout of changes to critical auth flows
  • Lead projects end-to-end, contribute to technical design and long-term direction of the IAM platform, and mentor teammates in identity and security domains
  • Partner with Product, Security, and engineering teams that depend on IAM primitives to ensure our APIs are clear, safe, and easy to adopt
  • This role may require participation in an on-call rotation to provide support outside of standard business hours, including evenings, weekends, and holidays, as needed.
  • Beyond steady-state ownership of our identity services, you'll help shape the next phase of Docker's IAM platform, including evolving our authorization model for fine-grained, cross-product access, expanding support for enterprise identity integrations, and improving the reliability and observability of systems on the critical request path.
  • The team owns authentication and authorization, access tokens, OIDC, SSO, and SCIM, and user and account management systems, along with supporting enterprise services.
  • This is a high-impact role for an engineer who enjoys deep backend work in a space where correctness, latency, and security all matter - and where the design decisions you make today shape how Docker scales identity for years to come.
  • We are committed to building a team that represents a variety of backgrounds, perspectives, and skills.

Requirements

  • Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent practical experience
  • Strong proficiency in Go, including building and operating services in production
  • Experience with gRPC and event-driven systems using Kafka (or comparable)
  • Experience operating on AWS
  • Strong understanding of core identity and security concepts: OAuth2, OIDC, SAML, JWT, token lifecycle, and session management
  • Experience with authorization models, including RBAC and ReBAC-style approaches
  • Track record of designing and operating distributed systems where reliability, security, and correctness are first-class concerns
  • Willingness and ability to participate in an on-call rotation for services on the critical request path
  • 6+ years of backend software engineering experience building and operating production services
  • Solid working knowledge of PostgreSQL - schema design, query performance, migrations, and operating Postgres under real load
  • Excellent written and verbal communication skills in a remote, async-first environment

Nice to have

  • Production experience with SCIM provisioning and enterprise SSO integrations
  • Hands-on experience with Auth0 or similar identity platforms
  • Exposure to compliance frameworks relevant to identity (SOC 2, ISO 27001, GDPR)
  • Experience with audit logging at scale, or with building identity primitives for machine / workload identities
  • Get to know the team, our services, and the identity domain at Docker
  • Pair with engineers across the IAM stack and ship your first changes to production
  • Get comfortable with our Go services, Postgres schemas, CI/CD, and on-call practices
  • Be a trusted technical leader within IAM, owning a functional area of the platform

Compensation

  • Technology stipend equivalent to $100 USD net/month

Benefits

  • Home office setup
  • 16 weeks of paid Parental leave (after 6 months of employment)
  • Technology stipend equivalent to $100 USD net/month
  • PTO plan that encourages you to take time to do the things you enjoy
  • Training stipend for conferences, courses and classes
  • Medical benefits, retirement and holidays vary by country
  • Equity; we are a growing start-up and want all employees to have a share in the success of the company

Company info

  • You'll work on systems used by millions of developers and the world's largest organizations, with the governance controls enterprise customers require.
  • we are a growing start-up and want all employees to have a share in the success of the company
  • The more inclusive we are, the better our company will be.

Equal opportunity

  • equal opportunity.

Visa & Work Authorization

  • Docker considers visa sponsorship on a case-by-case basis based on business needs.

This listing is sourced directly from Docker, Inc's careers page and normalized into a canonical job model.