Sr. Fullstack Engineer, Identity Platform

Location

NAMER

Employment Type

Full time

Location Type

Remote

Department

Engineering

Deadline to Apply

June 1, 2026 at 4:00 AM UTC

Compensation

• United States $174.2K – $261.2K • Offers Equity • Offers Bonus
• Canada CA$174.2K – CA$261.2K • Offers Equity • Offers Bonus

We believe all Zapiens should be rewarded competitively and equitably, using practices that are simple and transparent. This philosophy ensures we’re able to find, grow, and retain exceptional people from a broad range of backgrounds. Here’s how we define our compensation principles:

• Competitive: Zapier pays well among the technology sector.
• Equitable: Consistent pay practices; Pay for impact
• Simple: Pay is well understood, and pay practices are built for scale.
• Transparent: Zapiens know how pay works, including how their pay is determined.

A Candidate's compensation package is finalized once the interview process is concluded and accounts for demonstrated experience, job knowledge, skills, abilities, and internal equity. We use a business impact approach to base pay, which means we set pay for all Zapiens based on their demonstrated impact on Zapier’s success. In alignment with that philosophy, the upper half of a pay range is typically reserved for individuals who have consistently demonstrated a high impact in their current role and level while at Zapier. For more information on Zapier’s Total Rewards please click here.

AI at Zapier

At Zapier, we build and use automation every day to make work more efficient, creative, and human. So if you’re using AI tools while applying here - that’s great! We just ask that you use them responsibly and transparently. Check out our guidance on How to Collaborate with AI During Zapier’s Hiring Process, including how to use AI tools like ChatGPT, Claude, Gemini, or others during our hiring process - and when not to. Job Posted: March 17, 2026 Location: Americas - North, Central and South America Zapier's mission is to enable enterprise companies to build and maintain dependable AI workflows at scale. The Identity Platform team builds the golden path that every product team uses to deliver reliable, consistent, and secure experiences to these customers. Authentication, session management, and credential infrastructure are the foundation. Get them right, and every product team ships faster with confidence. We're hiring a Senior Fullstack Engineer to own this foundation, drive the strategic and architectural direction of this layer for years to come, and directly unlock our largest enterprise deals.

What you'll work on

• Enterprise authentication infrastructure: You'll design and extend the systems that handle SAML SSO, SCIM provisioning, OAuth/OIDC flows, multi-factor authentication, login, sign-up, and secure session for organizations with thousands of users. That spans the full auth surface: SCIM-driven user provisioning and de-provisioning, invitation flows, 2FA setup, SSO-enforced login, domain capture for auto-routing new signups, and session hardening. Reliability, latency, and efficiency are non-negotiables; auth is the most critical-path system at the company. You'll make these systems faster, more resilient,and easier for other teams to integrate with.
• User session auth across services: Zapier is a multi-service platform. You'll own how user sessions propagate across service boundaries; making sure authentication context is consistent,secur e,and performant whether a request hits the monolith,a Node.js service ,or a Go microservice.You'll evolve JWT validation ,token exchange ,and session tracking to handle the complexity of a growing service footprint.
• Enterprise authentication controlsand compliance: Enterprise customers need org-level authentication policy enforcement: forced SSO ,domain capture ,admin-managed authentication requirements ,and credential lifecycle controls like JWT key rotation ,token refresh ,and session expiry policies.You'll buildand extendthe APIs that give admins confidence their organization meets their security standards.SOC 2 access control evidence ,GDPR data subject requests ,and audit trail requirements are design constraints you'll work within regularly.
• Platform APIs that other teams depend on: Identity is infrastructure .Your APIs,libraries,and contracts are consumed by dozens of teams.You'll design for backward compatibility ,clear documentation,and low integration friction.But shippingthe API is halfthe job.You'll also drive adoption: writing integration guides,running migration paths,and embedding with product teams to help them use auth capabilities correctly.

Level

This is a Senior Engineer role.Senior engineers at Zapier own outcomes end-to-end within their teamand extend impact beyond it.You'll coordinate across ownership boundaries,s hape technical directionfor adjacent systems,and bring other engineers along with you. Our level definitions may look different from what you've seen elsewhere.We'll be transparent about leveling before you reachthe final stages.

About you

• You've setthe visionand built identity systemsfor enterprise SaaS at scale.Not configured them,built them.You have hands-on experiencewith SAML ,SCIM ,OAuth/OIDC ,or JWT in a multi-tenant SaaS environment.You understand authenticationat aprotocol level,you've dealtwith token replay ,session fixation,key rotation under load,multi-IdP federation ,just-in-time provisioning ,or identity linking across auth methodsin real systems serving real users.You know what breaks when an organizationwith 5 ,000 employees connects their IdPto your platformfor the first time.You are a thought leaderin the Identity domain who proactively follows industry trendsand Enterprise user management best practices.
• You work through AI agents ,not alongside them .Your daily development workflowis built around directingand reviewing agent-written code ,not writing it by hand .You have opinions about which models tousefor which tasks,you've hit real failure modesand built mitigations,and your workflowis actively evolving.When you hit unfamiliar territory,you don't slow down;you point your agentat the codebase,researchthe domain,and draft a plan.Then you builda POC or working prototype todemonstrate the concept in hours ,not iterate on aplanning docfor days.Bonus :you enable otherson your teamto work this way too.
• You think in platforms ,not features .You've built systems other engineering teams depend on.You know what it means to shipa breaking change toa internal API ,maintain backward compatibility under pressure,and write contracts that hold up as the organization scales.You understandthe cost of couplingandthe discipline of good boundaries.
• You're comfortable across thestack.This isa fullstack role ona platform team.You'll write backend servicesin Pythonand Node.js ,work with Djangoand Fastify,touch React when building admin tooling or developer-facing UIs,and navigate infrastructure concerns like Kubernetes,Terraform,and CI/CD pipelines.You don't needto be an expert in all of these,but you can't be afraidof any of them.
• You believe enterprise can move fast,and you ship through ambiguityto prove it.You've seen (or wantto prove)that shippingto enterprise customers doesn't have tomean slow ,waterfall-style cycles.When there's no spec,no designs,and no clear path forward,your first instinctis togather evidence ,breakthe problem intoa narrow first slice,and get rough working software into production within days ,not weeks.You use working prototypes todrive alignment rather than waitingfor consensus.You see compliance ,security,and rollout considerations as interesting design constraints ,not reasons tos low down .You're comfortable throwing work away when direction changesand you treat discarded work as afast learning loop ,not aloss.
• You work close tothe customer."Customer"for this team means both enterprise buyers evaluating Zapier's security postureand internal engineering teams integratingwith your APIs.You pull from both; reviewing customer security questionnaires,sitting inon enterprise calls ,reading support tickets,and talking directlyto engineers who consume your platform.You’ll also work closelywith customer support teams top rovide themwiththe toolsand processes totroubleshoot customer issuesand incidents.
• You own your work,yourself,and your communication.You take initiative without waitingfor permissionand ship fastand share early.You manage upand across inan async-first culture ,flagging risks,surfacing decisions,and keeping stakeholders informed without being asked.You use written artifacts ,working demos,and rough prototypes as your primary communication tools ,not meetings.You also own your mistakes,your gaps,and your rolein friction openly.You say "I don't know"and "I was wrong"out loud early,and without shame.

Things you'll do

• Designand maintain authenticationandsession systems (SAML ,SCIM,OAUTH/OIDC,MFA login sign-up 2FA user provisioning)as Zapier scales tol argerand more security-conscious customers
• Own user session propagationand JWT validationacross amulti-service architecture spanning Python Node.js Go
• Build enterprise authentication controlsand governance APIs forced SSO domain capture credential lifecycle admin authentication policies
• Buildand maintain platform libraries consumed by dozensof internal teams
• Treat reliability latencyandefficiency of auth systems as non-negotiables buildthe monitoring observabilityandaudit loggingto backthat up
• Respondto authentication-related incidentsand participateinon-call rotation
• Enable Security Enterprise Response product team partners tomove fasterby removingauth bottlenecks proactively surfacing what they need
• Join yearly company retreats that rotate to various cities throughout North America

Application Deadline:

The anticipated application window is 30 days from the date job is posted unless number of applicants requires it close sooner or later or if position filled. Even though we’re an all remote company,we still need be thoughtful about where we have Zapiens working.Check out this resource for list of countries where we currently cannot have Zapiens permanently working. Compensation Range: $174.2K - $261.2K Apply for this Job