Senior Software Engineer - Identity and Access | Canada | Remote

This is a remote opportunity and we would be interested in applicants from Canadian AST, EST, MST, and CST time zones only at this time.

Senior Software Engineer - Identity and Access

The Opportunity:

Every day, millions of users rely on Grafana to monitor the health and performance of their critical systems, from software applications to factories and even space shuttles. Our mission is two-fold: to provide a seamless and effortless sign-in experience for all users, and to ensure administrators have complete peace of mind, knowing that every user has secure access to precisely the data and functionality they need.

The Identity and Access team at Grafana manages all aspects of authentication and authorization, working across both our open-source and proprietary codebases. Our primary focus is on enhancing the scalability and streamlining the user experience for authentication and authorization. This involves both developing new features and maintaining current functionality, while also providing essential support to both our customer base and the wider community. We are completely redesigning Grafana's authentication at the edge, so this is a great opportunity to work on cutting edge authentication protocols and flows.

Our code paths are central to the critical hot paths across Grafana's services, making every millisecond of performance essential. We are dedicated to accommodating the diverse and evolving needs of every team we support.

What You’ll Be Doing:

You will work alongside your teammates to develop and maintain our authentication and authorization stack, which is largely built on open source tooling. We actively implement cutting-edge authentication and authorization protocols and systems, such as MCP OAuth (OAuth 2.1) and OpenFGA (Zanzibar), rather than relying on off-the-shelf components.

• Approximately 65% of your time will be dedicated to backend development (Golang), 25% to operations, and 10% to frontend adjustments
• Develop and maintain features for Grafana Cloud's internal and customer-facing authorization stack
• Contribute to the design and implementation of long horizon, scalable systems in the critical path of user interaction
• Build prototypes and present your ideas as part of a cross-functional team
• Stay up to date with the latest changes in Authorization and Authentication
• Grow to represent Grafana Labs in meetups and conferences

As we are remote-first and our engineering organization is largely remote, we provide guidance and meet regularly using video calls, so an independent attitude and good communication skills are a must.

What Makes You a Great Fit

• Hands-on experience delivering distributed systems written in Go
• Experience building and operating low-latency, high-throughput services in distributed systems.
• Proven ability to coordinate and distribute tasks among team members within the scope of exceptionally large projects.
• Ability to work in a fast-paced environment and work as part of a cross-functional team and quickly gather and build your knowledge
• Strong understanding of modern identity standards and threat models (OAuth 2.x / 2.1, OIDC, SAML)
• Strong understanding of SLOs, SLIs, error budgets, and how reliability impacts product decisions.
• Proficient written and verbal communication skills in English
  

Bonus Points For:

• Experience working with OpenFGA
• Experience working in security critical environments
• Experience contributing to or maintaining Open Source projects
• Familiarity with observability tooling (e.g., Grafana, Prometheus, OpenTelemetry)

In Canada, the Base compensation range for this role is CAD 164,490 - CAD 197,389. Actual compensation may vary based on level, experience, and skillset as assessed throughout the interview process.

All of our roles include Restricted Stock Units (RSUs), giving every team member ownership in Grafana Labs' success. We believe in shared outcomes—RSUs help us stay aligned and invested as we scale globally.