Software Engineer, Identity Infrastructure

Details

The Identity Infrastructure Engineering team builds identity and access systems that researchers, engineers, and internal teams rely on to protect critical systems and data. The team partners with Research, Applied Engineering, Infrastructure, IT, and Security across cloud and internal environments.

The role focuses on designing and building high-scale, high-throughput secure access proxies and the distributed systems behind them. Teleport is a core part of the current platform, alongside credential brokers, policy enforcement, and developer-facing integrations.

Responsibilities

• Design and implement secure access proxies, gateways, and credential brokers that provide narrowly scoped, auditable access to infrastructure and internal services while reducing standing privileges.
• Integrate identity and access policy across clients, proxies, and target systems so approved permissions take effect promptly and access expires or is revoked when required.
• Ensure correct behavior when policy is stale or sessions remain active.
• Build observability for end-to-end access paths, including latency, errors, saturation, authorization decisions, and identity attribution, without leaking credentials.
• Engineer safe multi-region rollouts, canaries, rollback, failover, and recovery.
• Validate changes with realistic test environments, load tests, and failure testing.
• Keep core access services reliable, performant, and maintainable.
• Own production support, maintenance, upgrades, and incident recovery.
• Ship durable fixes that reduce recurring failures, alert noise, and manual work.
• Make secure access easy to adopt through reusable APIs, client tooling, diagnostics, and self-service workflows.
• Lead migrations that preserve critical workflows, with tested rollback and recovery paths and clear ownership across Infrastructure, Security, and SRE.

Requirements

• Experience building and operating production backend, proxy, networking, or infrastructure services with demanding scale or availability requirements.
• Practical networking depth, including HTTP, TCP, TLS, DNS, routing, and load balancing across real request paths.
• Ability to explain approaches to performance bottlenecks, partial failures, multi-region deployment, or difficult production changes in systems personally built.
• Understanding of authentication, authorization, least privilege, trust boundaries, credential handling, and the consequences of access-control failures.
• Strong software engineering fundamentals and experience with Go, Rust, Python, or similar languages.
• Experience using tests, profiling, telemetry, and reproducible experiments to debug across system boundaries and verify correctness, performance, and recovery.
• Ability to make practical scope decisions, communicate tradeoffs clearly, and follow through from code to production.
• Teleport or comparable access-platform experience is helpful, but strong engineering and production ownership are more important than knowledge of every tool.

Benefits

• Base salary of $230,000–$325,000 per year.
• Equity and performance-related bonus opportunities for eligible employees.
• Medical, dental, and vision insurance, with employer contributions to Health Savings Accounts.
• Pre-tax accounts for health, dependent care, and commuter expenses.
• 401(k) retirement plan with employer match.
• Paid parental, medical, and caregiver leave.
• Paid time off, company holidays, and office closures.
• Mental health and wellness support.
• Employer-paid basic life and disability coverage.
• Annual learning and development stipend.
• Daily office meals and eligible meal delivery credits.
• Relocation support for eligible employees.
• Additional taxable fringe benefits may include charitable donation matching and wellness stipends.

OpenAI is an equal opportunity employer and provides reasonable accommodations to applicants with disabilities. Background checks are administered in accordance with applicable law.