Skip to content

Open nowPosted 9 hours agoWe saw it 81 min after it went up

Staff Software Engineer, Identity & Access Management

Crusoe329 open roles

Pay
$215,000 – $260,000 a year
Where
San Francisco, CA - US
Work mode
On site
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowStaff Software Engineer, Identity & Access ManagementCrusoe · San Francisco, CA - US
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Crusoe's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.3% of postings close within 7 days. Measured by our own scanner across the market. Crusoe postings stay open a median of 52 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.6%3 days
  3. 13.3%7 days
  4. 21.3%14 days
  5. 35.7%30 days
  6. 59.1%60 days
This job: posted 9 hours ago

Crusoe median: 52 days open

The posting

Crusoe is on a mission to accelerate the abundance of energy and intelligence. As the only vertically integrated AI infrastructure company built from the ground up, we own and operate each layer of the stack — from electrons to tokens — to power the world's most ambitious AI workloads. When you join Crusoe, you join a team that is building the future, faster.

We're in the midst of the greatest industrial revolution of our time. The demand for AI compute is boundless, and power is a bottleneck. We're solving that — with an energy-first approach that makes AI infrastructure better for the world and faster for the people innovating with AI.

We're looking for problem-solving, opportunity-finding teammates with a sense of urgency, who believe in the scale of our ambition and thrive on a path not fully paved — people who want to grow their careers alongside a team of experts across energy, manufacturing, data center construction, and cloud services.

If you want to do the most meaningful work of your career, help our customers and partners advance their AI strategies, and be part of a high-performing team that believes in each other, come build with us at Crusoe.

About the Role:

Crusoe is building the world's favorite AI-first cloud, and the Identity & Access Management (IAM) team is the security bedrock our customers trust to run their most demanding AI and GPU workloads. IAM sits on the hot path for every request in the cloud, authorizing millions of requests at single-digit-millisecond latency. We are seeking a Staff Software Engineer to set the technical direction for this platform: the fine-grained authorization model, enterprise SSO and identity federation, multi-tenant organization hierarchies, identity for the agentic-AI era, and credential and secrets management. As a Staff Engineer, you will own the multi-quarter architecture across these domains, tackle our most ambiguous, highest-blast-radius problems, and operate as a force multiplier, shaping technical strategy and roadmap with security, product, and leadership, and raising the engineering bar through technical leadership and mentorship.

What You'll Be Working On:

- Own IAM Architecture & Direction - Set and own the multi-quarter architecture for the fine-grained authorization model, authentication and federation, and identity lifecycle that secure every request in Crusoe's AI cloud.

- Define Platform-Wide Standards - Own the identity primitives, authorization patterns, and guardrails that keep access control consistent and secure across the entire Crusoe Cloud platform.

- Drive Build-vs-Buy & Framework Decisions - Lead evaluation and adoption of core IAM technologies, making durable, well-reasoned decisions.

- Solve the Hardest, Highest-Risk Problems - Take on ambiguous, high-blast-radius initiatives such as scaling the authorization hot path, multi-tenancy, and tenant isolation, balancing security, reliability, and latency.

- Stay Hands-On - Remain deeply technical: write and review code on the most critical and complex paths, and set the engineering quality bar through your own work.

- Lead Through Influence - Drive cross-team technical alignment, author design reviews and RFCs, and steer execution across multiple teams without direct authority.

- Champion Security at Scale - Lead threat modeling and secure-by-design practices for systems on the critical path of every request.

- Multiply the Team - Mentor senior and mid-level engineers, raise the engineering bar, and shape hiring, onboarding, and technical strategy.

What You'll Bring to the Team:

- Education & Experience - Bachelor's degree in Computer Science or a related field (or equivalent practical experience), 8+ years of software engineering experience building production distributed systems in Go, including significant experience with identity, authorization, or other security-critical systems, and a track record of leading the design of large-scale systems.

- Architectural Leadership - Demonstrated ability to set technical direction and deliver complex, fault-tolerant distributed systems and managed cloud services across multiple teams.

- Deep Security Expertise - Deep mastery of modern authentication and authorization: OIDC, OAuth2, SAML, and JWT / token exchange; RBAC/ABAC and fine-grained / relationship-based authorization; identity federation and IdP integration; SCIM and identity lifecycle; and credential and secrets management, including threat modeling at scale.

- Operational Leadership - Proven ownership of production reliability for hot-path services: defining SLOs, building deep observability, and leading incident response and postmortems. Enterprise security and compliance acumen (e.g., SOC 2), since enterprise SSO customers will drive many of the requirements you set.

- Influence & Communication - Exceptional ability to drive alignment across engineering, security, product, and leadership, and to articulate complex technical trade-offs to any audience.

- Force-Multiplier Mentorship - Proven record of growing senior engineers, improving engineering standards, and influencing hiring and technical strategy.

Bonus Points

- Policy-as-code and modern authorization engines - OPA, Cedar, or Zanzibar-style systems such as SpiceDB and OpenFGA.

- Experience with identity for AI agents and agentic workloads.

- Experience building for or operating GPU / AI cloud infrastructure.

- Enterprise compliance experience beyond SOC 2, such as FedRAMP or other regulated-environment frameworks.

You don't need to check every box. If you bring deep expertise in several of these areas and are excited about this work, we encourage you to apply even if you aren't a 100% skill or experience match.

Benefits:

- Competitive compensation and equity packages

- Restricted Stock Units

- Paid time off, paid holidays & leave of absence programs

- Comprehensive health, dental & vision insurance

- Employer contributions to HSA account

- Paid parental leave

- Paid life insurance, short-term and long-term disability

- Professional development & tuition reimbursement

- Mental health & wellness support

- Commuter benefits (parking & transit)

- Cell phone stipend

- 401(k) Retirement plan with company match up to 4% of salary

- Volunteer time off

- Global travel insurance & emergency assistance

- Daily meals allowance

- Additional perks & programs specific to location

Compensation Range

Compensation will be paid in the range of up to $215,000 - $260,000 + Bonus. Restricted Stock Units are included in all offers. Compensation to be determined by the applicant's knowledge, education, and abilities, as well as internal equity and alignment with market data.

Crusoe is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, disability, genetic information, pregnancy, citizenship, marital status, sex/gender, sexual preference/ orientation, gender identity, age, veteran status, national origin, or any other status protected by law or regulation.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Crusoe's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Crusoe's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Crusoe's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.