Loading...
LeadFull-timeRustGitAIAPI
Salary Range
$153,000 - $207,000 /year
This salary is estimated based on similar roles. The actual salary may vary.
About the Role
We are looking for a Staff Engineer to join the Users team at HighLevel, an AI-powered sales and marketing platform. This role focuses on building secure, resilient systems for identity, access, auditing, notifications, and security foundations across our multi-tenant SaaS platform.
Key Responsibilities
- →Design and evolve secure multi-tenant architectures for 100k+ agencies
- →Define and enforce tenant isolation guarantees at data, API, and infra levels
- →Build and review authorization models (RBAC / ABAC / hybrid)
- →Own token systems (API keys, OAuth flows, JWTs, scoped tokens, rotation, expiry)
- →Design fine-grained scopes for internal APIs, public APIs, and partner integrations
- →Map scopes → permissions → resources consistently
- →Prevent over-scoped tokens and privilege escalation
- →Lead security-critical backend designs (authZ boundaries, impersonation, auditability)
- →Set patterns for secure-by-default APIs used by internal and external teams
- →Partner with Infra/Security teams on Secrets management, Key rotation, Rate limiting & abuse prevention, Compliance readiness
- →Act as a multiplier: raise the security bar across engineering via reviews, RFCs, and mentoring
Requirements
- ✓8+ years of backend engineering experience
- ✓Proven experience building secure, multi-tenant SaaS platforms
- ✓Deep understanding of Authorization models (RBAC, ABAC), OAuth2 / JWT / API key systems, Threat modeling & security tradeoffs
- ✓Strong system design skills - especially for long-lived platforms
- ✓Comfort owning ambiguous, high-impact areas
