Backend Engineer, Identity

About Tailscale Tailscale is building the new Internet by delivering software that makes it easy to securely interconnect people and their devices, no matter where they are. From hobbyists to multinational corporations, teams of every size use Tailscale each day to protect their networks, share access to internal tools, and more. We're building a future for the Internet that's easy, sensible, and safe, like it used to be. Founded in 2019 and fully distributed, we're backed by Accel, CRV, Insight, Heavybit, and Uncork Capital. Job Description We’re seeking a skilled and diligent full-time Software Engineer to join our growing team. You will work as part of the engineering team to: Develop the Tailscale product, contributing to both open source client code and related backend services Take ownership of the entire product lifecycle, from writing code to product ideation and strategic decision-making Work closely with UX/UI designers and product managers to shape features Bring a special focus to building features related to identity and access management Because we’re an early-stage and fully remote company, we’re looking for a strongly motivated individual who can help move the product forward at crucial intersections of the technology and organization: in this case, the intersection of our backend platform and its various identity, authorization, and authentication needs. The ability to think on your feet, collaborate with highly technical teams, and comfort working asynchronously are essential. Key Responsibilities Work as part of a team of engineers to design, build, test, and document core software components Develop product features in areas that include our control plane, platform, and identity services Develop features that support a broad range of sign-on functionality, such as SSO, OAuth2, SAML, and WebAuthn Develop and maintain SCIM style capabilities to synchronize users, groups and other attributes from IdPs Exhibit ownership over the running services that comprise Tailscale’s product by building for observability, participating in incident response, and fielding customer support escalations Analyze and improve efficiency, scalability, and stability of various system resources Bring a security-first mindset to both design and implementation This role requires participation in our on-call rotation every x weeks, to triage and mitigate incidents. What We Are Looking For Familiarity with authentication/authorization protocols, standards and frameworks such as OAuth2, OIDC, SSO, and SAML. Familiarity with SCIM is a plus. Experience with distributed systems and building observable, secure, scalable, and resilient services Most of the non-front-end portions of the system are developed in the Go programming language. Experience with Go is a plus. Experience with one or more SQL databases Ability to give and process constructive feedback, as well as work independently Flexibility to adjust to the dynamic nature of a startup Excellent written and verbal communication skills Familiarity with networks (IP addressing, routing, etc.) is a plus As a company, we strive to maintain fair and equitable compensation practices within our team across all roles and all levels. Tailscale's compensation package includes base salary, equity, and comprehensive benefits. The salary range displayed on each job posting represents the target range for a new hire's base salary. Individual offers may vary based on experience and skill set. CAN Pay Range $218,420—$273,360 CAD Frequently cited statistics show that people who identify with historically marginalized groups are likely to apply to jobs only if they meet 100% of the qualifications. We encourage you to help us break that statistic! What We Offer An inclusive, flexible environment where you can be your authentic self. We recognize the impact of diverse voices and backgrounds on the growth of our people, product, and company. And that flexibility in how and when you work empowers our team to integrate work and life. A competitive total compensation package. This includes a base salary, an equity incentive plan and variable commission (for quota-based roles). Comprehensive group benefits with no waiting period. Take advantage of coverage for health, vision, dental, and more for you and your family! Remote first company—most of our teams work fully remotely. Enjoy a change of scenery wherever you can get wifi, participate in virtual and in-person social events, and leverage our corporate co-working program to visit WeWork (or other similar spaces near you). Some roles require in-office collaboration depending on team needs, which will be clearly noted in the job description. Connect with other Tailscalars IRL. Attend our annual company retreat, participate in team off-sites, and collaborate in person with teammates across Canada, the United States, and the United Kingdom. We support intentional in-person connection through team travel and distributed collaboration. Support for your personal and professional development. Grow your career thoughtfully with $1500 USD annually for professional development, or take advantage of mentorship, coaching, and internal promotion opportunities. Paid time off and a healthy work-life integration. Our flexible, paid time off program supports you for any situation life throws your way, whether moving homes or travelling the world! A build-your-own home office setup. You choose your own company-owned laptop (Mac or PC), receive a monthly home internet reimbursement, and $1000 USD to customize your workstation to make it your own. Generous parental leave program from your first day. We care about your life outside of work and encourage new parents to take advantage of parental leave top-ups for up to 26 weeks. Tailscale is committed to providing an accessible and inclusive hiring process. If you require an accommodation at any stage of the recruitment process or related to any aspect of this role, please contact your recruiter. Our hiring process uses AI-assisted tools to help screen and assess candidates. All hiring decisions are made by people. Please be aware that legitimate emails from Tailscale's talent team will only originate from @tailscale.com, @greenhouse.io, and @interviews.modernloop.io email addresses. For more information about protecting yourself from impersonators and scams, please visit https://tailscale.com/scam-awareness.