Temporal

Temporal

Senior Software Engineer, Cloud Identity

United States · Senior

Sponsorship not specified$212k-$237kDetected 42 days ago
PythonJavaGoDistributed SystemsTemporalOAuthComplianceHIPAACommunication

About the role

  • You'll work on the systems that authenticate users and workloads, authorize access to namespaces and APIs, and integrate with customer identity providers.

Responsibilities

  • Integrate with enterprise identity providers (Okta, Entra ID, Google Workspace) and support user provisioning (SCIM), with attention to common identity threats such as token replay and privilege escalation
  • Partner with Security, Product, and platform teams to ship secure-by-default patterns and contribute to IAM lifecycle and audit practices
  • Write clear architecture and design docs, and contribute to the team's technical direction
  • Solid hands-on experience building and operating production identity or auth systems - OAuth 2.0/OIDC, SAML, JWT, and token/key rotation
  • Strong communication skills and the ability to collaborate across security, product, and engineering teams

Nice to have

  • Exposure to workload identity or short-lived / federated credentials (SPIFFE/SPIRE, mTLS, WIF)
  • Experience with SCIM provisioning and enterprise SSO integrations
  • Contributions to identity OSS projects (Keycloak, Ory, Dex, OpenFGA, SPIRE)
  • Familiarity with compliance frameworks (SOC 2, ISO 27001, HIPAA) as they apply to IAM
  • Familiarity with Temporal or other durable-execution engines, especially auth implications around workers and task queues
  • Experience designing customer-facing API auth (scoped tokens, API keys, rotation)
  • familiarity with policy engines like OPA, Cedar, or OpenFGA is a plus
  • experience with Python, Java, or Rust is a plus

Compensation

  • Base Salary Range - $212,000 to $237,000, depending on qualifications and location

Benefits

  • Equity Options
  • Eligible for stock options as part of Temporal's equity plan

Company info

  • Build and improve core parts of Temporal Cloud's identity platform - authentication (OAuth 2.0/OIDC, SAML), authorization (RBAC and policy-based access), and workload identity - so customers and workloads can authenticate securely
Apply directly at Temporal →Create a free account for alerts like thisView Temporal immigration profile

This listing is sourced directly from Temporal's careers page and normalized into a canonical job model.