The opportunity
Crusoe is on a mission to accelerate the abundance of energy and intelligence . As the only vertically integrated AI infrastructure company built from the ground up, we own and operate each layer of the stack — from electrons to tokens — to power the world's most ambitious AI workloads.
What you'll do
Design and Deliver IAM Services: Own the end-to-end design, development, and operation of core IAM services - fine-grained authorization, authentication, identity federation, and identity lifecycle - that secure every request in Crusoe's AI cloud.
Solve Complex AuthN/AuthZ Problems: Design and build solutions to complex authentication and authorization scenarios at the platform level, including the fine-grained authorization model for accessing Crusoe Cloud resources.
Engineer for the Hot Path: Deliver low-latency, fault-tolerant services that remain highly available under load, since IAM is on the critical path for every API call.
Harden Security Posture: Apply security best practices such as OAuth2/OIDC, RBAC/ABAC, and session and credential management across the services you own.
Contribute to Architecture: Contribute to architectural decisions that support security, reliability, and maintainability across the company.
Collaborate Across Teams: Work with product, design, security, and SRE to evaluate tools, frameworks, and customer needs, aligning priorities to ship customer-first solutions.
What they're looking for
- Mentor and Elevate: Mentor engineers, enhance hiring and onboarding practices, perform code reviews, and contribute to a strong, inclusive engineering culture.
- Education & Experience: Bachelor's degree in Computer Science or a related field (or equivalent practical experience) and 5+ years of software development experience, primarily in Go and gRPC (or an equivalent compiled language).
- Distributed Systems Expertise: Proven ability to design and scale fault-tolerant distributed systems and develop managed cloud services.
- Security & Identity Expertise: Hands-on experience building authentication and authorization into production services - OAuth2/OIDC, RBAC/ABAC, and session, credential, and secrets management - along with strong security fundamentals such as encryption and TLS.