About the job

Google's software engineers develop the next-generation technologies that change how billions of users connect, explore, and interact with information and one another. Our products need to handle information at massive scale, and extend well beyond web search. We're looking for engineers who bring fresh ideas from all areas, including information retrieval, distributed computing, large-scale system design, networking and data storage, security, artificial intelligence, natural language processing, UI design and mobile; the list goes on and is growing every day. As a software engineer, you will work on a specific project critical to Google’s needs with opportunities to switch teams and projects as you and our fast-paced business grow and evolve. We need our engineers to be versatile, display leadership qualities and be enthusiastic to take on new problems across the full-stack as we continue to push technology forward.

As a Staff Software Engineer on the Workforce Identity team, you will architect the next generation of Google Cloud’s bring your own ID (BYOID) infrastructure a transformational effort to decouple access from identity synchronization. You will lead the platformization of seamless onboarding for SaaS products, engineering high-scale distributed systems that leverage openID connect (OIDC) and security assertion markup language (SAML) to bridge third-party identity providers with Google Cloud Platform (GCP) resources. You will pioneer the intersection of identity and applied AI, integrating the model context protocol (MCP) and agent-to-agent (A2A) frameworks to secure agentic workloads in multi-cloud and hybrid environments. You will balance security and "one-click" scalability with the drive to build an intelligent, identity-aware ecosystem that solves the most onboarding issues for enterprise customers.

The US base salary range for this full-time position is $207,000-$300,000 + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.

Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits. Learn more about benefits at Google.

Responsibilities

• Design and implement features and services in the Google Cloud Platform (GCP) identity ecosystem.

• Be involved in design/code reviews, architecture discussions and infrastructure reviews.

• Partner and collaborate with related engineering teams, product management and program management to ensure the development of high-quality solutions in a timely manner.

• Write reliable, efficient, and testable software.

• Analyze and troubleshoot problems and make recommendations.

Minimum qualifications

• Bachelor’s degree or equivalent practical experience.

• 8 years of experience in software development.

• 5 years of experience testing, and launching software products, and 3 years of experience with software design and architecture.

• 5 years of experience with Cloud Security or Identity.

• 3 years of experience applying Generative AI or machine learning to the cloud domain.

Preferred qualifications

• Master’s degree or PhD in Engineering, Computer Science, or a related technical field.

• 8 years of experience with data structures and algorithms.

• 3 years of experience in a technical leadership role leading project teams and setting technical direction.

• 3 years of experience working in a structured organization involving cross-functional, or cross-business projects.

• Experience with authentication.

• Experience with identity protocols such as open authorization (OAuth) or SAML.