Loading...
Staff Software Engineer (AppSec) at Harnessinc
HarnessincMountain View, California, United States·6d ago
LeadFull-timeJavaAWSGCPAzureKubernetesGraphQLMicroservicesCI/CDGitAI
Salary Range
$153,000 - $207,000 /year
This salary is estimated based on similar roles. The actual salary may vary.
About the Role
The Authentication and Authorization Engineer will design and implement scalable authentication and authorization systems for Harness's security ecosystem. This role involves building foundational RBAC systems, service-to-service authentication, audit logging, and common security services that enable secure access control across all Harness modules.
Key Responsibilities
- →Design and implement scalable authentication and authorization systems using modern RBAC patterns and industry best practices
- →Build high-performance, low-latency microservices for identity management, token validation, and access control that serve millions of API calls
- →Develop audit logging and compliance systems that meet enterprise security requirements and regulatory standards
- →Collaborate closely with AppSec Platform, CI/CD, and other product teams to integrate security services seamlessly
- →Solve complex distributed systems challenges around service-to-service authentication, token management, and secrets rotation
- →Work with SRE teams to ensure high availability and operational excellence of critical security infrastructure
- →Contribute to API design and GraphQL schemas that provide secure, efficient access to organizational resources
Requirements
- ✓Bachelor's or Master's degree in Computer Science, Software Engineering, or related technical field
- ✓6-10 years of backend engineering experience with strong focus on security, authentication, and distributed systems
- ✓Proficiency in JVM-based languages (Java, Scala, Kotlin) with expertise in building production-grade microservices
- ✓Deep understanding of authentication protocols (OAuth 2.0, OIDC, JWT), RBAC systems, and modern authorization patterns
- ✓Experience with RESTful APIs, GraphQL, and designing secure API architectures with proper access controls
- ✓Strong knowledge of distributed system patterns, service mesh architectures, and microservices design principles
- ✓Experience with both SQL and NoSQL databases, with understanding of data security and encryption at rest
- ✓Hands-on experience with cloud platforms (AWS, GCP, Azure) and container orchestration (Kubernetes)
