Staff Software Engineer

About Kaseya Kaseya is the leading provider of AI-powered IT management and cybersecurity software, serving Managed Service Providers (MSPs) and internal IT organizations worldwide. Our comprehensive platform helps organizations efficiently manage, secure, and automate their IT environments, driving operational efficiency and long-term business success. Backed by Insight Partners , a leading global software investor, Kaseya has experienced sustained double-digit growth and continues to expand its global footprint. Today, Kaseya supports customers in more than 20 countries and manages over 15 million endpoints worldwide. Founded in 2000, Kaseya has built a culture centered around innovation, accountability, and results. We are a high-growth, high-performance organization that values individuals who are driven, adaptable, and committed to delivering exceptional outcomes for our customers and teammates alike. At Kaseya, success comes from embracing challenges, moving with urgency, and continuously raising the bar. We are seeking a Staff Software Engineer to lead the technical design and implementation of a unified Identity and Access Management (IAM) platform that will serve as the foundation for authentication, authorization, governance, and compliance across a large portfolio of cloud products. Today, identities, roles, permissions, and authentication mechanisms are distributed across multiple products, creating operational complexity, inconsistent security controls, and compliance challenges. The IAM platform will establish a centralized identity governance layer supporting customers, partners, employees, APIs, services, and autonomous systems. This is a highly hands-on technical leadership role. You will be expected to personally design, build, and deliver critical platform components while driving architecture and adoption across multiple engineering organizations. Rather than building every capability from scratch, you will evaluate, integrate, extend, and operationalize leading open-source and commercial technologies to deliver a scalable, enterprise-grade platform. Responsibilities: Technical Leadership • Define the long-term architecture and technical roadmap for the IAM platform. • Lead identity, authentication, authorization, and access governance initiatives spanning multiple products and engineering teams. • Establish standards, reference architectures, and best practices for identity and access management across the organization. • Drive platform adoption and migration strategies for existing products and services. Hands-On Engineering • Design, implement, and operate core IAM platform services. • Build integrations between identity providers, API gateways, authorization systems, secrets management platforms, and SaaS products. • Develop services supporting user lifecycle management, machine identity management, delegated administration, access reviews, and compliance reporting. • Implement secure token exchange, service-to-service authentication, and federated identity workflows. • Build APIs, automation, and self-service capabilities for onboarding, provisioning, and access governance. • Troubleshoot and resolve complex scalability, reliability, and security challenges across the platform. Security & Governance • Design authorization models supporting RBAC, ABAC, delegated administration, and multi-tenant environments. • Define controls for least privilege, separation of duties, credential management, and privilege escalation prevention. • Ensure complete auditability of access grants, modifications, reviews, and revocations. • Partner with security and compliance teams to meet regulatory and customer requirements. Platform Engineering • Evaluate and leverage open-source IAM technologies to accelerate delivery while maintaining flexibility and control. • Extend and customize IAM platforms where required to support business-specific use cases. • Define operational requirements for availability, disaster recovery, o