Skip to content

Open nowPosted 4 days ago

Staff Software Engineer, Query and Access Control

Asana105 open roles

Where
Reykjavík
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowStaff Software Engineer, Query and Access ControlAsana · Reykjavík
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Asana's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.8% of postings close within 7 days. Measured by our own scanner across the market. Asana postings stay open a median of 41 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.4%3 days
  3. 11.8%7 days
  4. 18.6%14 days
  5. 35.6%30 days
  6. 45.1%60 days
This job: posted 4 days ago

Asana median: 41 days open

The posting

We're looking for a staff software engineer to work on how data is queried and who is allowed to see it. Every read in Asana passes through this layer: it resolves what a user is asking for and enforces, on every object, whether that user is permitted to see it. You will help us keep those guarantees correct and fast as our largest customers grow their domains, their permission structures get more intricate, and AI agents become a significant new class of caller.

The Query and Access Control team owns the query execution path over the Work Graph and the permissioning model that governs it. As a staff engineer on the team, you will take on our hardest technical problems and drive the work that spans several teams, bringing depth to the design decisions that shape this layer for years. We work closely with other teams in the core infrastructure area to build and retain customer trust in Asana as the platform for their critical workflows.

This role is based in our Reykjavik office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do and the teams with which you partner. If you're interviewing for this role, your recruiter will share more about the in-office requirements.

What you'll achieve

  • Design and implement a query layer over the Work Graph that stays correct and performant as customer domains and permission structures grow
  • Evolve our access control model so that permission checks remain sound, auditable, and fast on every read path
  • Define how new classes of caller, including AI agents acting on a user's behalf, are authorized, without weakening the guarantees customers depend on
  • Drive large, multi-quarter projects that cut across team boundaries, from design and implementation through deployment and iteration
  • Build alignment on the design with engineers and leaders in other teams before the code is written, and keep that alignment as the work lands
  • Share what you know through design review, code review, and mentorship
  • Partner with infrastructure teams across Asana to define how user data in the Work Graph is accessed
  • Support framework and product engineers to build new product functionality at scale, quickly

About you

  • 8+ years of engineering experience building and operating reliable backend services at scale, with 3+ years driving large-scale projects
  • You have driven large technical initiatives spanning multiple teams, and perhaps organizations, from early design to adoption
  • You go deep on hard problems and can carry a design from first principles through to production
  • You enjoy sharing what you know with other engineers and helping them build production-quality infrastructure
  • You are skilled at communicating technical concepts and constraints to cross-functional partners in product
  • You bring care and rigor to systems where correctness is not negotiable, and can reason about the blast radius of a change before it ships

Desirable

  • You have experience with authorization systems, permission models, or multi-tenant data isolation at scale
  • You have worked on query engines, query planning, caching layers, or graph-shaped data access
  • You are familiar with infrastructure-as-code and container orchestration technologies like Terraform and Kubernetes

At Asana, we're committed to building teams that include a variety of backgrounds, perspectives, and skills, as this is critical to helping us achieve our mission. If you're interested in this role and don't meet every listed requirement, we still encourage you to apply.

What we’ll offer

Our comprehensive compensation package plays a big part in how we recognize you for the impact you have on our path to achieving our mission. We believe that compensation should be reflective of the value you create relative to the market value of your role. To ensure pay is fair and not impacted by biases, we're committed to looking at market value which is why we check ourselves and conduct a yearly pay equity audit.

For this role, the estimated base salary range is between 1 600 000 - 1 800 000 ISK monthly. The actual base salary will vary based on various factors, including market and individual qualifications objectively assessed during the interview process. The listed range above is a guideline, and the base salary range for this role may be modified.

In addition to base salary, your compensation package may include additional components such as equity, sales incentive pay (for most sales roles), and benefits. If you're interviewing for this role, speak with your Talent Acquisition Partner to learn more about the total compensation and benefits for this role.

We strive to provide equitable and competitive benefits packages that support our employees worldwide and include:

  • Mental health, wellness & fitness benefits
  • Career coaching & support
  • Inclusive family building benefits
  • Long-term savings or retirement plans
  • In-office culinary options to cater to your dietary preferences

These are just some of the benefits we offer, and benefits may vary based on role, country, and local regulations. If you're interviewing for this role, speak with your Talent Acquisition Partner to learn more about the total compensation and benefits for this role.

#LI-Hybrid #LI-AZ

About us

Asana is a leading platform for human + AI collaboration. Millions of teams around the world rely on Asana to achieve their most important goals, faster. Asana has been named to Fortune's Best Workplaces for 7+ years and recognized by Fast Company, Forbes, and Gartner for excellence in workplace culture and innovation. We offer an exceptional office-centric culture while adopting the best elements of hybrid models to ensure that every one of our global team members can work together effortlessly. With 13+ offices all over the world, we are always looking for individuals who care about building technology that drives positive change in the world and a culture where everyone feels that they belong.

We believe in supporting people to do their best work and thrive. Our goal is to ensure that Asana upholds an environment where all people feel that they are respected and valued, whether they are applying for an open position or working at the company. We provide equal employment opportunities to all applicants without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by law.

Join Asana’s Talent Network to stay up to date on job opportunities and life at Asana.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Asana's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Asana's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Asana's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.