Staff Software Engineer Access Management

^P-211

At Databricks we are obsessed with enabling data teams to solve the worlds toughest problems from security threat detection to cancer drug development. We do this by building and running the worlds best data and AI infrastructure platform so our customers can focus on the high-value challenges that are central to their missions.

Our engineering teams build highly technical products that fulfill real important needs in the world. We constantly push the boundaries of data and AI technology while simultaneously operating with the resilience security and scale that is critical to making customers successful on our platform.

Customers trust Databricks with their most valuable data and Trust & Safety has the mission to build the most trusted data analytics and ML platform in the world. Security Engineering is an integral part of Trust & Safety and has a critical role to play in keeping customer data from bad actors. We are looking for senior leaders such as yourselves to create the vision and define the strategy for this space.

We are hiring a Staff Software Engineer for the Access Management team at Databricks based in Bellevue WA. Access Management owns the access-gating systems at the core of the Databricks platform the services that decide for every user application and automated workload what they are permitted to do. You will set technical direction for the Bellevue engineers and partner with our Mountain View technical lead on a team distributed across both sites.

What youll work on:

• Evolving the platforms core authorization service the system is on the critical path of every access-control decision.
• Migrating and consolidating permission-checking across the platform onto a unified authorization model.
• Building fine-grained access controls: scoped service identities delegated access and role-based access control.
• Network ingress access policy for customer resources.
• Raising the availability and reliability of a high-throughput low-latency authorization service.

What were looking for:

• Deep expertise in access management identity or authorization systems.
• Strong distributed systems and security fundamentals.
• Demonstrated technical leadership on a team ideally across multiple locations.
• Track record of designing and shipping backend services at scale.