{"id":3479727,"url":"https://alion.io/job/id-me-staff-software-development-engineer-wallet-authentication","title":"Staff Software Development Engineer – Wallet - Authentication","company":{"id":58615,"name":"ID.me","domain":"idme.com","url":"https://alion.io/company/id-me","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":95,"open_postings":11,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":98,"computed_at":"2026-10-31T05:58:55Z"}},"role":"Backend","role_family":"Backend","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Mountain View, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":183000,"max_usd":341000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1500},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"Claude Code","optional":false},{"name":"Cursor","optional":false},{"name":"Go","optional":false},{"name":"GraphQL","optional":false},{"name":"Java","optional":false},{"name":"Kotlin","optional":false},{"name":"Rest API","optional":false},{"name":"Scala","optional":false},{"name":"SQL","optional":false},{"name":"Apache Kafka","optional":true},{"name":"API Gateway","optional":true},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"GCP","optional":true},{"name":"Kong","optional":true}],"status":"live","first_seen_at":"2026-10-29T18:56:33Z","employer_posted_date":"2026-10-29","last_verified_at":"2026-10-31T12:56:22Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Company Overview\nID.me is the next-generation digital identity wallet that simplifies how individuals securely prove their identity online. Consumers can verify their identity with ID.me once and seamlessly login across websites without having to create a new login and verify their identity again. Over 175 million users experience streamlined login and identity verification with ID.me at 22 federal agencies, 50 state government agencies, and more than 100 healthcare organizations. Over 600 consumer brands use ID.me to verify communities and user segments to honor service and build more authentic relationships. ID.me’s technology meets the federal standards for consumer authentication set by the Commerce Department and is approved as a NIST 800-63-3 IAL2 / AAL2 credential service provider by the Kantara Initiative. ID.me is committed to “No Identity Left Behind” to enable all people to have a secure digital identity. To learn more, visit https://network.id.me/.\nID.me is a full-time, in-office culture. Unless a specific job description explicitly states otherwise, all roles are on-site five days per week at one of our offices in McLean, VA; Mountain View, CA; New York City, NY; or Tampa, FL. Certain roles - such as field-based sales or other remote-by-design positions - may have different work arrangements as noted in their individual postings.\nAt ID.me, we embrace the thoughtful use of AI tools in our daily work and there are even occasions where we leverage AI in our hiring process. However, during the interview process, we want to understand your individual skills and experiences. Therefore, we have guidelines on how AI can be appropriately used during your application and interviews which can be found here.\nRole Overview\nID.me is seeking a Staff Software Engineer to join the Wallet - Authentication team, which builds the core sign-in, registration, and account management experiences that over 170 million members rely on to access the ID.me identity wallet. Authentication is the front door to ID.me: every member journey begins with creating, signing into, or managing their Wallet. The team owns sign-in, registration, MFA, account recovery, password reset, and MyWallet, along with the real-time risk engine that keeps those flows secure, ensuring members can access their verified identity across numerous federal agencies, state governments, healthcare organizations, and consumer brands.\nAuthentication sits at the intersection of identity, security, and consumer experience. Every feature the team ships balances three concerns at once: security that defends against credential attacks, account takeover, and abuse; usability that keeps friction low so legitimate members get in quickly; and trust that gives members confidence their identity is protected. The team's real-time risk engine is central to this balance, adapting authentication requirements to the risk of each attempt. The experiences the team builds are reusable across every ID.me member journey, not purpose-built for a single relying party or use case.\nAs a Staff Software Development Engineer (P5), you will be a backend and API technical anchor for this team. You will contribute to the architecture of the services, data models, and APIs behind sign-in, registration, MFA, account recovery, and account management, and own defined portions of the authentication platform end-to-end. You will help shape the API contracts that internal teams and downstream relying parties depend on and serve as a go-to engineer for how authentication is built, secured, and scaled. The ideal candidate brings deep backend and API expertise, strong instincts for secure, high-availability distributed systems, and the ability to translate complex security, risk, and identity requirements into reliable, low-friction authentication services.\nThis position will work from our Mountain View, CA office five days per week.\nKey Responsibilities\nBuild & Own Authentication Services: Contribute to the architecture of the services and APIs behind sign-in, registration, MFA, account recovery, password reset, and MyWallet, and own defined portions end-to-end. Take loosely defined, high-ambiguity problems, clarify requirements with stakeholders, and drive initiatives from definition through deployment and post-launch evaluation. Design for reuse and extensibility across member journeys so that new authentication methods and requirements need configuration, not rewrites.\nDesign & Own APIs and Integrations: Design, document, and evolve REST and event-driven APIs that expose authentication capabilities to internal teams and downstream relying parties. Own the contracts and full lifecycle - versioning, backwards compatibility, and deprecation - for the APIs you own, holding a high bar for reliability, latency, and security. Ensure these interfaces integrate seamlessly across ID.me's ecosystem and remain a stable foundation others can build on. Own key integrations with MFA providers, email/SMS delivery services, internal identity services, and downstream relying parties, including their failure modes and reliability, and proactively surface issues and opportunities discovered during integration work.\nAdvance the Real-Time Risk & Abuse Mitigation Platform: Contribute to and evolve the team's real-time risk engine and drive its integration across authentication flows - detecting and mitigating credential attacks, account takeover, and abuse while preserving a low-friction experience for legitimate members. Drive step-up authentication, MFA challenges, and adaptive friction that respond to the risk of each attempt, and design these safeguards to be configurable across member journeys rather than specific to one flow. Treat security as a first-class concern in every system you design.\nData Models, Distributed Systems & Production Health: Develop robust data models and storage patterns for credentials, sessions, and account state across relational and other data stores. Apply distributed systems fundamentals - caching, asynchronous and event-driven processing, and cloud-native patterns - to keep authentication services correct, performant, and scalable. Help drive their availability and correctness at production scale, where an error is either a member locked out of their identity or a security exposure: raise the bar for observability, incident response, and post-mortems; participate in and strengthen the on-call rotation; and drive continuous improvement of sign-in success rates, latency, and system health.\nSet Engineering Standards & Mentor Engineers: Serve as one of the technical leaders for the team's codebase. Define patterns for service and API design, data handling, provider integrations, testing, and secure credential handling. Establish code quality and CI/CD standards, conduct code reviews, and raise the engineering bar across the team. Improve the health of the codebase by identifying and addressing technical debt and strengthening shared foundations that accelerate the whole roadmap. Mentor senior and mid-level engineers through pairing, code review, design discussions, and architectural guidance, creating team redundancy on the systems you own and growing the capabilities of the engineers around you.\nPartner Closely with Product, Design, and Security: Work hand-in-hand with Product, Design, Security, Identity, and adjacent engineering teams to deliver cohesive auth experiences. Anticipate cross-system dependencies and help resolve ambiguity on technical approaches. Push back constructively when designs create security risk or undermine platform reusability, and contribute your perspective to the team's roadmap and technical direction.\n AI-Forward Engineering: Champion AI-first engineering practices on the team, leveraging AI tooling for design, code generation, test coverage, documentation, and review cycles. Model and reinforce a culture where AI accelerates both individual productivity and team delivery.\nRequired Qualifications\nBachelor's degree in Computer Science, Engineering, or a related field, or equivalent practical experience.\n8+ years of professional software engineering experience, with deep expertise building and operating high-availability backend services and APIs at scale.\nProven ability to lead complex, cross-team technical initiatives from definition through delivery with minimal oversight, setting technical direction and making sound architectural tradeoffs along the way.\nExpert-level proficiency in a modern backend language and ecosystem (e.g., Java, Kotlin, Go, or Scala), with a track record of building and operating production services and APIs.\nDemonstrated expertise designing, documenting, and evolving REST or GraphQL APIs, and owning the contracts that internal teams, external consumers, and SDKs depend on across their full lifecycle.\nStrong command of relational databases and SQL - schema design, query performance, and safe schema evolution in production - and of distributed systems fundamentals such as caching, asynchronous processing, and event-driven architecture.\nStrong understanding of secure system design - including authentication, authorization, session and token handling, and defending production systems against abuse.\nProficiency with AI-assisted development tooling (e.g., Claude Code, Cursor) demonstrated by at least one year of daily use, in addition to a commitment to an AI-first engineering culture that leverages these tools to maximize code quality, test coverage, and engineering velocity.\nStrong collaboration and communication skills, with experience influencing technical direction across Product, Design, Security, and Engineering, and a track record of mentoring engineers and raising the technical bar of a team.\nPreferred Qualifications\nExperience building or owning authentication and identity systems - particularly sign-in, registration, MFA, or account recovery.\nExperience implementing authentication and authorization standards such as OAuth2, OpenID Connect, SAML, JWT, or FIDO2/WebAuthn.\nExperience building, owning, or scaling fraud detection, real-time risk engines, or abuse mitigation systems.\nFamiliarity with security best practices for credential handling - password storage, session management, token issuance, and rate limiting.\nExperience with event-driven architectures (e.g., Kafka, SNS/SQS, Pub/Sub) and patterns for decoupled service communication.\nExperience with cloud infrastructure (AWS, GCP, or Azure), containerization, and deployment pipelines, and with API gateway technologies (e.g., Kong, Apigee, AWS API Gateway).\nProven ability to own and evolve platform APIs consumed by multiple internal teams and external customers, across the full lifecycle from design through versioning and deprecation.\nExperience in regulated or high-assurance domains such as government, healthcare, or financial services, where compliance requirements directly shape system design.\nStrong debugging and performance optimization skills in complex production systems.\nStartup or high-growth company experience with a strong bias toward execution, ownership, and making something better every day.\nAbout ID.me\nID.me is the next-generation digital identity wallet that simplifies how individuals securely prove their identity online. Consumers can verify their identity with ID.me once and seamlessly log in across websites without needing to create a new login and re-verify. Over 140 million users experience streamlined login and identity verification with ID.me at 20 federal agencies, 44 state government agencies, and 66 healthcare organizations. More than 600 consumer brands use ID.me to verify communities and user segments to honor service and build more authentic relationships. ID.me's technology meets the federal standards for consumer authentication set by the Commerce Department and is approved as a NIST 800-63-3 IAL2 / AAL2 credential service provider by the Kantara Initiative. ID.me is committed to \"No Identity Left Behind\"...","description_format":"text","description_chars":14683,"description_truncated":true,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity","Parental leave"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Health Care","Identity Management"],"lifecycle":[{"event":"open","at":"2026-10-29T19:51:45Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 12","filings_12m":12,"filings_prev_12m":11,"green_card_filings_12m":0,"median_offered_wage_usd":212500,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":8}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":98,"reasons":["conf:0","velocity","win:early"],"computed_at":"2026-10-31T05:58:55Z"},"pay":null,"html_url":"https://alion.io/job/id-me-staff-software-development-engineer-wallet-authentication","json_url":"https://alion.io/job/id-me-staff-software-development-engineer-wallet-authentication.json","meta":{"generated_at":"2026-10-31T15:11:14Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":23678,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58615},"rest":"https://alion.io/mcp/rest/get_company?id=58615"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fid-me-staff-software-development-engineer-wallet-authentication"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fid-me-staff-software-development-engineer-wallet-authentication"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fid-me-staff-software-development-engineer-wallet-authentication"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/id-me-staff-software-development-engineer-wallet-authentication\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fid-me-staff-software-development-engineer-wallet-authentication"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3479727}},{"tool":"search_jobs","arguments":{"company":"idme.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3479727},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}