Staff Software Engineer

FusionAuth

. Tackle demanding platform and feature initiatives within the FusionAuth core product .

Posted 10/8/2026full-timeDenver • Colorado • United StatesLead💰 $190,000 - $230,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in software engineering with a focus on secure, resilient code delivery and architectural integrity. Proficient in OAuth 2.x, OIDC, and SAML, with a strong emphasis on mentoring and guiding engineering teams toward high-quality standards.

Highest-signal resume keywords

OAuth 2.x, OIDC, And SAML ExpertiseJava Programming SkillsPostgreSQL Tuning ExperienceAI-Augmented Development PracticesTechnical Design Documentation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Software EngineeringProduction Code DeliveryTest AutomationArchitectural DesignSecurity ComplianceAPI VersioningBackward CompatibilityDatabase ManagementCloud DeploymentTechnical Mentorship

Soft Skills

CommunicationConsensus BuildingLeadership

Tools & Technologies

KubernetesClaude CodeCodex

Certifications & Qualifications

Bachelor's Degree In Computer Science

Industry Keywords

CIAMFIDO2SOC 2FedRAMPGDPR

Tech Stack

Tools & technologies

CloudJavaKubernetesPostgresSDLC

About the role

Key responsibilities & impact

Tackle demanding platform and feature initiatives within the FusionAuth core product
Deliver resilient, secure, thoroughly tested production code for complex technical challenges
Lead major end-to-end projects from scoping and estimation through technical design and general availability
Write Technical Design Documents and advocate clear technical directions
Guide senior engineers on architectural plans and organizational quality, security, reliability, and scalability standards
Elevate code and architectural review standards
Define and enforce architectural integrity and testing-quality standards
Advance test automation and coverage for enterprise-grade reliability
Design advanced OAuth 2.x, OIDC, and SAML flows for enterprise deployments
Handle security edge cases and federation patterns
Engage enterprise customers and prospects on implementation guidance, integration architecture, and complex authentication troubleshooting
Protect backward compatibility, API versioning, and upgrade paths across customer-managed deployments
Apply OWASP, data residency, encryption, and GDPR-related security and compliance judgment
Mentor senior engineers toward Staff-level autonomy and ramp junior engineers through pairing and review
Build consensus on complex technical decisions across teams
Communicate technical strategy to stakeholders and represent Engineering with Product, Sales Engineering, and Support
Evaluate and implement AI-driven solutions, organizational context, AI-augmented development, and automated testing across the SDLC

Requirements

What you’ll need

Bachelor's degree in Computer Science or equivalent demonstrable technical depth
10+ years of professional software engineering experience
Demonstrated staff-level technical competency
Currently writes and ships production code; recent, active engineering experience required
Production-grade experience with OAuth 2.x, OIDC, and SAML, including federation and security edge cases
Strong Java skills and working understanding of the JVM
Experience tuning PostgreSQL or a comparable relational database at scale
Experience designing or supporting software deployed across self-hosted or dedicated cloud environments
Experience with backward compatibility and upgrade paths
Uses AI development tools such as Claude Code or Codex in everyday workflow
Experience helping a team adopt AI-augmented development practices
Willingness to work onsite 1–2 days per week if local to Denver, or travel to the office 2–3 times per year if located elsewhere
Must be authorized to work for any employer in the U.S.; visa sponsorship unavailable
Preferred: Direct CIAM or identity platform experience
Preferred: Familiarity with FIDO2/passkeys, DPoP, token binding, and OAuth 2.x drafts
Preferred: Kubernetes production experience
Preferred: Familiarity with SOC 2, FedRAMP, and GDPR
Preferred: Open-source identity/security contributions or technical writing on identity topics
Preferred: Track record of mentoring junior engineers

Benefits

Comp & perks

Comprehensive health insurance including medical, dental, and vision coverage, with the company covering the majority of your medical premiums
Fully employer-paid High Deductible Health Plan (HDHP) option paired with a Health Savings Account (HSA), including employer contributions
Basic life insurance and short- and long-term disability coverage fully paid by the company
Voluntary life insurance options
Healthcare and Dependent Care Flexible Spending Accounts (FSAs)
401(k) plan with company match
Generous paid time off (PTO) plus paid company holidays
Employee Assistance Program (EAP) offering confidential counseling and support services
Professional growth and development opportunities
Eligibility for performance-based bonuses or variable compensation
Modern tenant lounge and café with collaborative workspaces
Fitness studio, showers, lockers, and secure bike storage
Stocked in-suite kitchen with snacks and beverages
Onsite café with fresh, locally sourced, organic, and non-GMO menu options
3-acres of green space, parks, picnic areas, and access to jogging, biking, and recreation trails
Yoga and wellness programs
Dedicated outdoor workspaces and patio gathering areas
On-site parking, easy freeway access, and high-speed fiber internet
Sustainability-minded campus and community initiatives
Reimbursement of reasonable travel and lodging expenses associated with onsite interviews