[All remote jobs](https://jobicy.com/jobs.md)[![Kong Inc. logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2022/03/f43352b801f4c6854ba70c5f70cec7cd.jpeg)](https://jobicy.com/company/kong-inc.md)[Kong Inc.](https://jobicy.com/company/kong-inc.md) # Staff Software Engineer, Konnect Core Platform Review the role, location requirements, compensation details, and application process before deciding whether this opportunity fits your next career move. [Apply for this job](#job-application)[View company](https://jobicy.com/company/kong-inc.md)ShareRemote from[USA](https://jobicy.com/job-region/usa.md)SalaryUSD 150k–275k / yrDepartment[Software Engineering](https://jobicy.com/categories/engineering.md)EmploymentFull TimeExperienceSeniorPublished31 Oct 2026Apply before30 Nov 2026Listing views40Application actions4Application toolkit ## Make your next move. Prepare your resume, explore your fit, and draft a cover letter for this opportunity. AI Summary ## The role, at a glance. Kong is seeking a Staff Software Engineer to architect and evolve its multi-tenant Kong Identity platform within the Konnect Core Platform. The role focuses on high-scale authentication, token lifecycle management, identity federation, cryptographic controls, and globally distributed infrastructure. The engineer will lead technical strategy for extensible identity APIs, developer tooling, observability, fraud prevention, and compliance capabilities. Success requires deep expertise in OAuth/OIDC, SAML, SCIM, JWT security, distributed systems, and enterprise-grade identity architecture. This is a senior technical leadership role with significant design ownership and mentorship responsibilities. ## Role DNA A quick view of the complexity, pace, ownership and collaboration implied by the job description. ### Job Complexity 5/5EasyHard ### Pace & Pressure 4/5RelaxedFast-paced ### Autonomy Level 5/5GuidedFull ownership ### Communication Load 4/5IndependentCollaborative AI insightThis is a highly complex staff-level role requiring architecture ownership across security-critical, globally distributed identity systems. It combines advanced protocol knowledge, compliance constraints, performance engineering, and technical leadership. ## Salary analysis Estimated compensation compared with the broader US market for similar roles. Estimated job median (per year)Market rate$212,500US market range (per year)$190k–$300k0$330k AI insightThe employer discloses an annual base compensation range of $150,000–$275,000 USD, with a midpoint of $212,500. This is a credible range for a US-based staff engineer specializing in identity, distributed systems, and security; the estimated US market range is $190,000–$300,000 annually. ## Core skills Skills and capabilities most closely associated with this opportunity. [OAuth 2.0](https://jobicy.com/jobs?search_keywords=OAuth%202.0.md)[OpenID Connect](https://jobicy.com/jobs?search_keywords=OpenID%20Connect.md)[JWT](https://jobicy.com/jobs?search_keywords=JWT.md)[Identity and Access Management](https://jobicy.com/jobs?search_keywords=Identity%20and%20Access%20Management.md)[Multi-tenant Architecture](https://jobicy.com/jobs?search_keywords=Multi-tenant%20Architecture.md)[Distributed Systems](https://jobicy.com/jobs?search_keywords=Distributed%20Systems.md)[SAML Federation](https://jobicy.com/jobs?search_keywords=SAML%20Federation.md)[SCIM Provisioning](https://jobicy.com/jobs?search_keywords=SCIM%20Provisioning.md)[Cryptographic Key Management](https://jobicy.com/jobs?search_keywords=Cryptographic%20Key%20Management.md)[Token Management](https://jobicy.com/jobs?search_keywords=Token%20Management.md)[Security Architecture](https://jobicy.com/jobs?search_keywords=Security%20Architecture.md)[Kubernetes](https://jobicy.com/jobs?search_keywords=Kubernetes.md)[Observability](https://jobicy.com/jobs?search_keywords=Observability.md)[Compliance Engineering](https://jobicy.com/jobs?search_keywords=Compliance%20Engineering.md)[API Design](https://jobicy.com/jobs?search_keywords=API%20Design.md) Sample interview questionsHow would you design refresh token rotation with real-time revocation for a multi-tenant identity platform?I would issue short-lived access tokens and one-time-use refresh tokens linked to a token family, tenant, client, subject, and device or session context. Each refresh would atomically invalidate the prior token and issue a successor, while reuse detection would revoke the token family and trigger security events. Revocation state would be propagated through a low-latency distributed store and regional caches with carefully defined consistency and fail-safe behavior. What design considerations are most important for cross-tenant isolation in an enterprise identity service? Isolation must be enforced at every layer: authorization decisions, data partitioning, cache keys, cryptographic key scopes, audit trails, rate limits, and administrative APIs. I would use tenant-scoped identifiers and policies, validate tenant context at service boundaries, and build automated tests for cross-tenant access failures. Operational tooling must also prevent support and analytics workflows from accidentally exposing tenant data. How would you balance authentication latency with security in a globally distributed token validation system? I would use locally verifiable, short-lived signed tokens where appropriate, regionally distributed public-key material, and edge caching with bounded TTLs. Sensitive decisions such as revocation, high-risk transactions, or policy changes can require introspection or stronger consistency checks. The system should continuously measure latency, cache effectiveness, propagation delay, and security-event signals to adapt safely. Describe your approach to implementing enterprise federation with SAML, LDAP/AD, and external identity providers. I would define a normalized internal identity model while using protocol adapters for SAML, OIDC, LDAP/AD, and SCIM. The implementation should support tenant-specific mappings, attribute transformations, certificate and key rotation, just-in-time provisioning, and clear diagnostics for failed federation flows. Security controls would include strict validation of assertions, replay prevention, metadata lifecycle management, and detailed audit logging. How would you lead a compliance-focused technical initiative such as SOC 2, FedRAMP, or GDPR readiness? I would translate applicable controls into concrete system requirements, owners, evidence, and measurable acceptance criteria. For identity systems, I would prioritize immutable audit trails, least-privilege access, retention controls, encryption and key management, data residency, incident response, and change management. I would work with security, legal, and operations teams early so compliance is built into architecture and delivery rather than added at the end. Opportunity details ## About this role. Are you ready to unlock intelligence? If you don’t think you meet all of the criteria below but are still interested in the job, please apply. Nobody checks every box – we’re looking for candidates that are particularly strong in a few areas, and have some interest and capabilities in others. About the Role: Kong is building the future of API management for developers. We’re a fast-growing, well-funded company with happy customers and motivated employees. Insomnia, acquired in 2019, is a full-lifecycle API development platform that has quickly become an integral part of Kong’s product portfolio. As a Staff Software Engineer on the Konnect team at Kong, you’ll architect Kong Identity’s multi-tenant identity platform supporting complex organizational hierarchies, cross-tenant isolation, and enterprise-grade security controls. What You’ll Do: * Design and implement advanced token management systems, including refresh token rotation, proof-of-possession tokens, and custom token introspection with real-time revocation capabilities. * Lead development of Kong Identity’s extensible claims engine supporting dynamic attribute resolution, contextual claim injection, and complex business logic evaluation at token issuance. * Architect global identity infrastructure with edge optimization, intelligent token caching, and cross-region replication strategies for sub-millisecond authentication latency worldwide. * Design sophisticated rate limiting, anomaly detection, and fraud prevention systems to protect against credential stuffing, token abuse, and distributed attacks. * Build enterprise identity federation capabilities, including SAML bridge patterns, external IdP chaining, and custom protocol adapters for legacy system integration. * Lead technical strategy for Kong Identity’s developer experience, including SDKs, webhooks, audit logging, and real-time analytics dashboards for token lifecycle visibility. * Architect advanced client management systems supporting dynamic client registration, automated credential rotation, and programmatic policy enforcement. * Design Kong Identity’s plugin architecture enables custom grant flows, protocol extensions, and third-party integrations while maintaining security boundaries. * Drive implementation of compliance frameworks (SOC 2, FedRAMP, GDPR), including comprehensive audit trails, data residency controls, and privacy-preserving token designs. * Lead technical initiatives for Kong Identity’s integration with observability platforms, supporting distributed tracing, metrics collection, and security event correlation. * Mentor engineering teams on advanced identity concepts including zero-trust architectures, workload identity, and service mesh integration patterns. What You’ll Bring: * 7+ years of experience building production identity platforms at leading identity providers or enterprise software companies, with proven track record of handling millions of authentication requests daily. * Deep expertise in advanced OAuth 2.0 extensions (PKCE, mTLS, JWT bearer assertions, token exchange), OpenID Connect profiles, and emerging standards like OAuth 2.1 and GNAP. * Proven experience architecting multi-tenant identity platforms with complex isolation requirements, tenant-specific configurations, and enterprise feature sets. * Strong background in cryptographic protocols including advanced JWT patterns, key rotation strategies, Hardware Security Module (HSM) integration, and post-quantum cryptography considerations. * Experience building identity platforms with sophisticated analytics, real-time monitoring, and security event detection capabilities at enterprise scale. * Expertise in global identity infrastructure including edge deployment strategies, geo-distributed token validation, and cross-region data consistency patterns. * Deep understanding of enterprise identity integration patterns including SAML federation, LDAP/AD bridges, SCIM provisioning, and custom protocol adapters. * Proven track record building developer-first identity platforms including comprehensive SDKs, webhook systems, and extensible API designs. * Experience with identity platform security including threat modeling, penetration testing coordination, and implementation of advanced attack prevention mechanisms. * Strong background in compliance and regulatory requirements for identity systems including audit trail design, data residency controls, and privacy engineering. * Experience building identity platforms supporting complex organizational structures, delegated administration, and fine-grained permission models. * Expertise in high-performance system design including horizontal scaling strategies, caching architectures, and latency optimization for identity operations. * Knowledge of service mesh identity patterns, workload identity bootstrapping, and integration with container orchestration platforms. * Experience with identity protocol extensions, custom grant flows, and building extensible identity platforms that support diverse use cases. * Proven ability to lead technical initiatives in complex, regulated environments while balancing innovation with security and compliance requirements. #LI-AW1 About Kong: Kong Inc., the AI Connectivity Company, is building the connectivity layer of AI. Trusted by the Fortune 500® and AI-native startups alike, Kong’s unified API and AI platform enables organizations to secure, manage, accelerate, govern, and monetize the flow of intelligence across APIs and AI traffic — on any model, any cloud. For more information, visit [www.konghq.com](http://www.konghq.com). Show more [Apply now >](https://jobicy.com/jobs/158231-staff-software-engineer-konnect-core-platform.md) * ![Upload CV](data:image/svg+xml;base64,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) ### Upload your resume now To unlock remote work opportunities and be discovered by global employers. This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content. Next step ## Apply now. Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information. Keep exploring ## Related remote jobs. * ![Thumbtack logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/05/Jobicy-210503180426-842530.jpg) Thumbtack Oct 31 New ### [Full-Stack Engineer, AI Platform](https://jobicy.com/jobs/158260-full-stack-engineer-ai-platform.md) Thumbtack helps millions of people confidently care for their homes. Thumbtack is the one app you need to take care of and improve your home — from personalized guidance to… * ![ExtraHop logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/4800f505-221.jpg) ExtraHop Oct 31 New ### [Senior Software Engineer | Middleware](https://jobicy.com/jobs/158245-senior-software-engineer-middleware.md) At ExtraHop, we’re on a mission to protect and empower the connected enterprise. We reveal what is happening in the very infrastructure that sustains businesses, lives, and communities, and ensure… * ![Phantom logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/3d0a3a49-221.png) Phantom Oct 31 New ### [AI Engineer](https://jobicy.com/jobs/158242-ai-engineer.md) Phantom is on a mission to connect the world to the freedom of open markets. Tens of millions of people all over the world use Phantom to access global markets… * ![LevelUp logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/31e98500-221.png) LevelUp Oct 31 New ### [Software Developer](https://jobicy.com/jobs/158207-software-developer-2.md) Company Overview LevelUp is a specialist agency providing outsourcing solutions to agencies, software vendors, and website owners. For over seven years, we have successfully collaborated with a variety of companies,… * ![LevelUp logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/31e98500-221.png) LevelUp Oct 31 New ### [Senior HubSpot Implementation Specialist](https://jobicy.com/jobs/158200-senior-hubspot-implementation-specialist.md) Company Overview LevelUp is a specialist agency providing outsourcing solutions to agencies, software vendors, and website owners. For over seven years, we have successfully collaborated with a variety of companies,… * ![Welo Global logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/06/83c40f94-221.webp) Welo Global Oct 31 New ### [Ads Quality Rater – Vietnamese (Vietnam)](https://jobicy.com/jobs/158199-ads-quality-rater-vietnamese-vietnam.md) Welo Data is an award-winning localization and data transformation company. We run one of the world’s largest Ads Rating Programs, and we want you to join! As an Ads Quality… * ![Mercury logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2023/11/dfb1112a-221.jpeg) Mercury Oct 31 New ### [Frontend Engineer – Design Systems](https://jobicy.com/jobs/158196-frontend-engineer-design-systems.md) Mercury’s Design Systems team helps product teams build interfaces that feel consistent, accessible, and carefully considered. We’re hiring a Frontend Engineer to help evolve the shared components and patterns behind… * ![Mercury logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2023/11/dfb1112a-221.jpeg) Mercury Oct 31 New ### [Engineering Manager – Bank Accounts](https://jobicy.com/jobs/158183-engineering-manager-bank-accounts.md) Roman aqueducts quietly carried water across cities and made daily life possible. Their value was not in the structures themselves, but in everything they enabled. The Bank Accounts team plays… * ![hims & hers logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2023/11/e7b9b920-221.jpeg) hims & hers Oct 31 New ### [Staff Software Engineer, Frontend](https://jobicy.com/jobs/158175-staff-software-engineer-frontend.md) Hims & Hers is the leading health and wellness platform, on a mission to help the world feel great through the power of better health. We are redefining healthcare by… * ![Deepgram logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2020/12/WRILS-201212160008-406229.jpg) Deepgram Oct 31 New ### [Sr. Backend Engineer – Engine Team: API](https://jobicy.com/jobs/158166-sr-backend-engineer-engine-team-api.md) Company Overview Deepgram is the leading platform underpinning the emerging trillion-dollar Voice AI economy, providing real-time APIs for speech-to-text (STT), text-to-speech (TTS), and building production-grade voice agents at scale. More… [Browse all jobs](https://jobicy.com/jobs.md)