Sr. Software Engineer

About Xage

Xage is building a Zero Trust platform that helps enterprises securely connect, manage, and protect users, machines, applications, and critical infrastructure. Our platform provides identity-centric access control and privileged access management across distributed environments.

About the Role

We are seeking a Senior Full-Stack Software Engineer specializing in Identity and Access Management (IAM) and Privileged Access Management (PAM) to join the core engineering team responsible for the management and control plane of Xage's Zero Trust platform.

You will design, build, and operate security-critical systems that determine who can access enterprise resources, under what conditions, and how that access is enforced. Your work will span identity management, authentication, authorization, directory federation, policy enforcement, and Xage Privileged Access Management (XPAM), including secure privileged-session brokering and credential lifecycle management.

This role combines deep backend and distributed-systems engineering with end-to-end product development. You will work across service APIs, identity and policy engines, data models, and administrative user interfaces to deliver secure, reliable, and scalable enterprise capabilities.

We are looking for an engineer who combines strong software engineering fundamentals with security-minded design, takes ownership from architecture through production, and can translate complex identity and access requirements into maintainable software.

Key Responsibilities

• IAM Platform & Authorization:
  Design and develop scalable identity management, authentication, authorization, and policy enforcement services for users, groups, roles, and machine identities, including lifecycle management and RBAC/ABAC.
• Enterprise Authentication & Federation:
  Implement SAML, OAuth/OIDC, MFA, FIDO2/WebAuthn, and certificate-based authentication; integrate Active Directory and LDAP directories with reliable identity synchronization and reconciliation.
• Privileged Access Management (XPAM):
  Build secure credential vaulting, rotation, just-in-time access, privileged-session brokering, plugin integrations, and tamper-evident auditing.
• Technical Leadership & Delivery:
  Lead architecture, development, testing, and production deployment while driving security, scalability, reliability, performance, and engineering best practices across teams.

Required Qualifications

• 5+ years of software engineering experience, or equivalent demonstrated expertise, building and operating production-grade software systems.
• Strong proficiency in Go and solid computer science fundamentals, including algorithms, data structures, concurrency, and state-machine design.
• Experience designing, developing, testing, and debugging distributed backend services and APIs.
• Strong understanding of IAM concepts, including authentication, authorization, federation, identity lifecycle management, and least-privilege access.
• Working knowledge of enterprise identity standards and protocols, including SAML 2.0, OAuth 2.0, OIDC, and LDAP/Active Directory.
• Experience with relational databases, data modeling, transactions, and production data integrity.
• Strong understanding of security engineering principles, including secure coding, secrets management, access control, and threat modeling.
• Experience delivering production software from design through deployment and ongoing support.
• Ability to lead technical projects, communicate architectural decisions, and collaborate effectively across engineering teams.

Preferred Qualifications

• Direct experience developing or operating IAM, PAM, Zero Trust, or enterprise security platforms.
• Experience with privileged-session brokering, credential vaulting, just-in-time access, or automated credential rotation.
• Hands-on experience with Active Directory multi-domain or multi-forest environments, Kerberos, LDAP synchronization, or large-scale directory deployments.
• Experience with PKI, X.509 certificates, mTLS, FIDO2/WebAuthn, MFA, and certificate or credential rotation.
• Familiarity with SCIM provisioning, RBAC/ABAC, policy engines, and service or machine identity management.
• Experience with frontend development using React, TypeScript, or comparable modern frameworks.
• Experience with production observability, incident response, performance testing, and distributed-system reliability.

Technical Stack

Go, Python, React.js, Ansible, plugin-based integrations, gRPC, Protocol Buffers, Kafka, Consul, PostgreSQL, CouchDB, ClickHouse.

Identity and Security:
SAML 2.0, OAuth 2.0, OIDC, FIDO2/WebAuthn, MFA, LDAP/Active Directory, mTLS, X.509 PKI

What Success Looks Like

• Delivering reliable identity, authentication, and authorization capabilities for enterprise environments.
• Improving the security and usability of privileged-access workflows while protecting credentials throughout the session lifecycle.
• Building resilient integrations with enterprise identity providers and directory systems.
• Delivering maintainable, well-tested backend services and administrative interfaces.
• Improving the reliability, performance, and operational readiness of Xage's security-critical platform.
• Demonstrating technical leadership and end-to-end ownership of key engineering initiatives.

Perks

• Salary: $140,000 - $180,000 + equity
• Full health, dental, vision insurance
• Continuous training, support and focus on your career goals
• Mid stage startup opportunity in a massive sized market with proven traction and growing rapidly

Xage Recognition & Momentum

Xage Security has experienced explosive growth and received numerous awards and recognition, including:

• Named a Forbes America’s Best Startup Employer 2024-2026
• $17 million contract awarded by U.S. Space Force’s Space Systems Command (SSC) to offer its zero trust access control
• Named in Gartner research on Privileged Access Management, Cyber-Physical Systems Protection Platforms, and CPS Secure Remote Access
• Named in Forrester research on Operation Technology Security, IoT, and Microsegmentation
• Recognized in 2026 for leadership in Privileged Access Management and Zero Trust for AI by The Hacker News, Cybersecurity Excellence Awards, and Artificial Intelligence Excellence Awards
• ISO 27001:2022, IEC 62443, and FIPS 140-3 certified