{"id":3709709,"url":"https://alion.io/job/crusoe-staff-software-engineer-identity-access-management","title":"Staff Software Engineer, Identity & Access Management","company":{"id":48024,"name":"Crusoe","domain":"crusoe.ai","url":"https://alion.io/company/crusoe-ai","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"A","score":85,"open_postings":39,"ghost_share":0,"stale_share":0.615,"repost_share":0,"time_to_fill_p50_days":57,"computed_at":"2026-11-09T06:03:00Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Francisco, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":215000,"max":260000,"currency":"USD","period":"year","gross":null,"usd_annual":260000},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AI Agents","optional":false},{"name":"IAM","optional":false},{"name":"SLI/SLO/SLA","optional":false},{"name":"SOC 2","optional":false},{"name":"Threat Modeling","optional":false},{"name":"FedRAMP","optional":true}],"status":"live","first_seen_at":"2026-11-03T20:15:32Z","employer_posted_date":"2026-11-03","last_verified_at":"2026-11-09T13:11:08Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"Crusoe is on a mission to accelerate the abundance of energy and intelligence. As the only vertically integrated AI infrastructure company built from the ground up, we own and operate each layer of the stack - from electrons to tokens - to power the world's most ambitious AI workloads. When you join Crusoe, you join a team that is building the future, faster.\nWe're in the midst of the greatest industrial revolution of our time. The demand for AI compute is boundless, and power is a bottleneck. We're solving that - with an energy-first approach that makes AI infrastructure better for the world and faster for the people innovating with AI.\nWe're looking for problem-solving, opportunity-finding teammates with a sense of urgency, who believe in the scale of our ambition and thrive on a path not fully paved - people who want to grow their careers alongside a team of experts across energy, manufacturing, data center construction, and cloud services.\nIf you want to do the most meaningful work of your career, help our customers and partners advance their AI strategies, and be part of a high-performing team that believes in each other, come build with us at Crusoe.\nAbout the Role:\nCrusoe is building the world's favorite AI-first cloud, and the Identity & Access Management (IAM) team is the security bedrock our customers trust to run their most demanding AI and GPU workloads. IAM sits on the hot path for every request in the cloud, authorizing millions of requests at single-digit-millisecond latency. We are seeking a Staff Software Engineer to set the technical direction for this platform: the fine-grained authorization model, enterprise SSO and identity federation, multi-tenant organization hierarchies, identity for the agentic-AI era, and credential and secrets management. As a Staff Engineer, you will own the multi-quarter architecture across these domains, tackle our most ambiguous, highest-blast-radius problems, and operate as a force multiplier, shaping technical strategy and roadmap with security, product, and leadership, and raising the engineering bar through technical leadership and mentorship.\nWhat You'll Be Working On:\nOwn IAM Architecture & Direction - Set and own the multi-quarter architecture for the fine-grained authorization model, authentication and federation, and identity lifecycle that secure every request in Crusoe's AI cloud.\n\nDefine Platform-Wide Standards - Own the identity primitives, authorization patterns, and guardrails that keep access control consistent and secure across the entire Crusoe Cloud platform.\n\nDrive Build-vs-Buy & Framework Decisions - Lead evaluation and adoption of core IAM technologies, making durable, well-reasoned decisions.\n\nSolve the Hardest, Highest-Risk Problems - Take on ambiguous, high-blast-radius initiatives such as scaling the authorization hot path, multi-tenancy, and tenant isolation, balancing security, reliability, and latency.\n\nStay Hands-On - Remain deeply technical: write and review code on the most critical and complex paths, and set the engineering quality bar through your own work.\n\nLead Through Influence - Drive cross-team technical alignment, author design reviews and RFCs, and steer execution across multiple teams without direct authority.\n\nChampion Security at Scale - Lead threat modeling and secure-by-design practices for systems on the critical path of every request.\n\nMultiply the Team - Mentor senior and mid-level engineers, raise the engineering bar, and shape hiring, onboarding, and technical strategy.\n\nWhat You'll Bring to the Team:\nEducation & Experience - Bachelor's degree in Computer Science or a related field (or equivalent practical experience), 8+ years of software engineering experience building production distributed systems in Go, including significant experience with identity, authorization, or other security-critical systems, and a track record of leading the design of large-scale systems.\n\nArchitectural Leadership - Demonstrated ability to set technical direction and deliver complex, fault-tolerant distributed systems and managed cloud services across multiple teams.\n\nDeep Security Expertise - Deep mastery of modern authentication and authorization: OIDC, OAuth2, SAML, and JWT / token exchange; RBAC/ABAC and fine-grained / relationship-based authorization; identity federation and IdP integration; SCIM and identity lifecycle; and credential and secrets management, including threat modeling at scale.\n\nOperational Leadership - Proven ownership of production reliability for hot-path services: defining SLOs, building deep observability, and leading incident response and postmortems. Enterprise security and compliance acumen (e.g., SOC 2), since enterprise SSO customers will drive many of the requirements you set.\n\nInfluence & Communication - Exceptional ability to drive alignment across engineering, security, product, and leadership, and to articulate complex technical trade-offs to any audience.\n\nForce-Multiplier Mentorship - Proven record of growing senior engineers, improving engineering standards, and influencing hiring and technical strategy.\n\nBonus Points\nPolicy-as-code and modern authorization engines - OPA, Cedar, or Zanzibar-style systems such as SpiceDB and OpenFGA.\n\nExperience with identity for AI agents and agentic workloads.\n\nExperience building for or operating GPU / AI cloud infrastructure.\n\nEnterprise compliance experience beyond SOC 2, such as FedRAMP or other regulated-environment frameworks.\n\nYou don't need to check every box. If you bring deep expertise in several of these areas and are excited about this work, we encourage you to apply even if you aren't a 100% skill or experience match.\nBenefits:\nCompetitive compensation and equity packages\n\nRestricted Stock Units\n\nPaid time off, paid holidays & leave of absence programs\n\nComprehensive health, dental & vision insurance\n\nEmployer contributions to HSA account\n\nPaid parental leave\n\nPaid life insurance, short-term and long-term disability\n\nProfessional development & tuition reimbursement\n\nMental health & wellness support\n\nCommuter benefits (parking & transit)\n\nCell phone stipend\n\n401(k) Retirement plan with company match up to 4% of salary\n\nVolunteer time off\n\nGlobal travel insurance & emergency assistance\n\nDaily meals allowance\n\nAdditional perks & programs specific to location\n\nCompensation Range\nCompensation will be paid in the range of up to $215,000 - $260,000 + Bonus. Restricted Stock Units are included in all offers. Compensation to be determined by the applicant's knowledge, education, and abilities, as well as internal equity and alignment with market data.\nCrusoe is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, disability, genetic information, pregnancy, citizenship, marital status, sex/gender, sexual preference/ orientation, gender identity, age, veteran status, national origin, or any other status protected by law or regulation.","description_format":"text","description_chars":6966,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity","Life insurance","Parental leave","Professional development","Restricted stock units","Retirement plans","Vision insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Data Centers & Colocation","AI Compute & Inference"],"lifecycle":[{"event":"open","at":"2026-11-03T22:25:35Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 13","filings_12m":13,"filings_prev_12m":0,"green_card_filings_12m":0,"median_offered_wage_usd":237500,"route":null,"cap_exempt":false,"checked_at":"2026-11-09T07:32:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":1}],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":5,"expected_fill_days":57,"reasons":["conf:2","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-11-09T06:03:00Z"},"pay":{"stated_usd_annual":260000,"is_top_pay":true},"html_url":"https://alion.io/job/crusoe-staff-software-engineer-identity-access-management","json_url":"https://alion.io/job/crusoe-staff-software-engineer-identity-access-management.json","meta":{"generated_at":"2026-11-09T15:58:34Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":22864,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":48024},"rest":"https://alion.io/mcp/rest/get_company?id=48024"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcrusoe-staff-software-engineer-identity-access-management"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcrusoe-staff-software-engineer-identity-access-management"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcrusoe-staff-software-engineer-identity-access-management"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/crusoe-staff-software-engineer-identity-access-management\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcrusoe-staff-software-engineer-identity-access-management"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3709709}},{"tool":"search_jobs","arguments":{"company":"crusoe.ai","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3709709},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}