Remote opportunity at
CoinbaseSenior Staff Software Engineer, Platform - IAM
Coinbase is hiring a remote Senior Staff Software Engineer, Platform - IAM to shape the technical direction for identity and access management. Coinbase works to increase…
Career Tools
About This Role
Coinbase is hiring a remote Senior Staff Software Engineer, Platform - IAM to shape the technical direction for identity and access management. Coinbase works to increase economic freedom through an intense and demanding work environment, operating as a remote-first organization where team members occasionally gather in person for quarterly working sessions referred to as surges. In this role, the engineer will act as a primary technical voice for identity, establishing…
Job Description
Coinbase is hiring a remote Senior Staff Software Engineer, Platform - IAM to shape the technical direction for identity and access management. Coinbase works to increase economic freedom through an intense and demanding work environment, operating as a remote-first organization where team members occasionally gather in person for quarterly working sessions referred to as surges. In this role, the engineer will act as a primary technical voice for identity, establishing an overarching multi-year architecture that merges human users, AI agents, workloads, and services into a unified framework across more than 700 internal systems. The position requires guiding strategy across multiple engineering pods, defining integration standards, and collaborating closely with security, compliance, infrastructure, and IT leadership to build automated regulatory controls.
This opportunity is well-suited for an experienced distributed systems expert with deep knowledge of identity protocols who can drive widespread adoption without direct authority. The selected candidate will build migration paths, handle build-versus-buy evaluations, minimize standing privileges, and mentor senior and staff engineers to elevate the organization's domain expertise.
Responsibilities
- Design and execute a multi-year technical strategy for identity and access management encompassing workforce, AI agent, and workload identities under a shared model.
- Formulate architecture standards, review criteria, and integration protocols for multiple engineering teams.
- Develop migration paths and build-versus-buy approaches for over 700 internal systems.
- Collaborate with security, compliance, infrastructure, IT, and product engineering leaders to transform audit mandates into automated controls and evidence generation.
- Develop data models and tooling to track access distribution and limit standing privileges.
- Mentor senior and staff engineers to strengthen the organization's capabilities in the identity domain.
Requirements
- 12 or more years of software engineering background, including serving as a primary technical leader on a multi-team platform.
- Extensive experience in identity and access management domains such as workforce identity, authorization, access lifecycles, or non-human identity.
- Production background utilizing Go and designing distributed systems on AWS.
- Familiarity with identity protocols including OAuth 2.0, OIDC, SAML, SCIM, and workload identity patterns.
- Proven ability to influence technical direction and secure leadership alignment across different organizational groups without direct authority.
- Experience translating regulatory and audit requirements into automated technical controls with clear communication skills for executive audiences.
Core Skills
Benefits
- Medical insurance
- Dental insurance
- Vision insurance
- 401(k) plan
- Equity eligibility
- Bonus eligibility
Frequently Asked Questions
What is the location and remote work policy for this role?
The position is remote-first, though it is not remote-only. Employees are expected to attend quarterly in-person working sessions known as surges.
What is the annual base salary range for this position?
The annual base salary ranges from $253,895 to $298,700 USD, excluding equity and bonus eligibility.
Are there any limits on submitting job applications at Coinbase?
Candidates are restricted to submitting a maximum of three applications within any six-month period.
What technical stack and protocols are required?
Applicants need production experience in Go, distributed systems design on AWS, and fluency in standards such as OAuth 2.0, OIDC, SAML, SCIM, and workload identity patterns.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.