About the company
Brex is an intelligent finance platform offering corporate cards and banking, spend management, bill pay, and travel software. Its engineering teams build systems with high autonomy and deep collaboration, owning outcomes end to end.
Responsibilities
- Design, build, and operate backend systems and APIs for authentication, authorization, identity context, and audit-related workflows.
- Lead initiatives end to end, from technical design and implementation through rollout, measurement, and operational support.
- Improve login and access experiences across SSO, MFA, step-up authentication, delegated access, and enterprise identity flows.
- Build and extend authorization systems supporting custom roles, resource-aware access control, and secure defaults for product teams.
- Lead creation of durable, identity-aware audit trails and attribution for user, service, delegated, and agent-driven actions.
- Partner with engineers across Brex to make IAM integrations secure by default and easier to adopt through clear patterns, tooling, and shared libraries.
- Mentor engineers and improve reliability and maintainability across the team’s systems.
Requirements
- Strong software engineering fundamentals and experience building reliable production backend systems.
- Experience leading complex projects and mentoring engineers.
- Strong API design fundamentals and rigor around testing, code quality, and documentation.
- Understanding of core IAM concepts, including authentication, authorization, sessions, tokens, MFA, SSO, OAuth, SAML, OIDC, or RBAC.
- Clear communication, cross-team collaboration, and effectiveness in cross-functional technical discussions.
- Commitment to operational excellence, system reliability, reducing toil, and maintaining high-quality services.
- Strong product and engineering judgment, balancing security, usability, and developer experience.
- Bonus: production experience with identity and access management, authentication, authorization, or audit systems; hands-on experience with Okta, Oso, SSO, SAML, OIDC, OAuth, or WebAuthn; experience building enterprise-facing admin controls, authorization platforms, delegated access flows, or audit trails; or experience on platform teams providing shared infrastructure, paved roads, or secure-by-default frameworks.
Conditions
- Based in the New York office in a hybrid environment. Monday, Wednesday, and Thursday are designated in-office days; up to four weeks per year may be fully remote.
- Expected annual salary range: $240,000–$300,000. Starting base pay depends on location, skills, experience, market demands, and internal pay parity. Equity and other compensation may be included in the total compensation package.