engineering
Posted Apr 15Staff Software Engineer, Identity and Access Management
at Konghq
Toronto, CanadaRemote
Requirements
- Insomnia, acquired in 2019, is a full-lifecycle API development platform that has quickly become an integral part of Kong’s product portfolio.
- experience building production identity platforms at leading identity providers or enterprise software companies, with proven track record of handling millions of authentication requests daily. - Deep expertise in advanced OAuth 2.0 extensions (PKCE, mTLS, JWT bearer assertions, token exchange), OpenID Connect profiles, and emerging standards like OAuth 2.1 and GNAP. - Proven
- experience architecting multi-tenant identity platforms with complex isolation requirements, tenant-specific configurations, and enterprise feature sets. - Strong background in cryptographic protocols including advanced JWT patterns, key rotation strategies, Hardware Security Module (HSM) integration, and post-quantum cryptography considerations. -
- Experience building identity platforms with sophisticated analytics, real-time monitoring, and security event detection capabilities at enterprise scale.
- - Deep understanding of enterprise identity integration patterns including SAML federation, LDAP/AD bridges, SCIM provisioning, and custom protocol adapters.
- Experience with identity platform security including threat modeling, penetration testing coordination, and implementation of advanced attack prevention mechanisms. - Strong background in compliance and regulatory
- Experience building identity platforms supporting complex organizational structures, delegated administration, and fine-grained permission models. - Expertise in high-performance system design including horizontal scaling strategies, caching architectures, and latency optimization for identity operations. - Knowledge of service mesh identity patterns, workload identity bootstrapping, and integration with container orchestration platforms. -
- Experience with identity protocol extensions, custom grant flows, and building extensible identity platforms that support diverse use cases. - Proven ability to lead technical initiatives in complex, regulated environments while balancing innovation with security and compliance requirements. #LI-AW1 About Kong: Kong Inc., a leading developer of API and AI connectivity technologies, is building the infrastructure that powers the agentic era.
- Trusted by the Fortune 500 and startups alike, Kong's unified API and AI platform, Kong Konnect, enables organizations to secure, manage, accelerate, govern, and monetize the flow of intelligence across APIs and AI models.
Contact
- For more information, visit www.konghq.com http://www.konghq.com.
Additional details
- Are you ready to power the World's connections? If you don’t think you meet all of the criteria below but are still interested in the job, please apply.
- Nobody checks every box - we’re looking for candidates that are particularly strong in a few areas, and have some interest and capabilities in others.
- About the role: Kong is building the future of API management for developers.
- We’re a fast-growing, well-funded company with happy customers and motivated employees.
- - Expertise in global identity infrastructure including edge deployment strategies, geo-distributed token validation, and cross-region data consistency patterns.