[All remote jobs](https://jobicy.com/jobs.md)[![Spotify logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/03/Jobicy-210328105941-289246.jpg)](https://jobicy.com/company/spotify.md)[Spotify](https://jobicy.com/company/spotify.md) # Staff Engineer – Identity and Access Management User Platform AI Summary Spotify is seeking a Staff Engineer to set technical direction for its Identity and Access Management (IAM) User Platform. The role designs and evolves distributed authentication, authorization, account lifecycle, and secure-access services used at significant scale. It requires cross-team architectural influence, strong operational engineering judgment, and close collaboration with product and security stakeholders. The engineer will improve reliability, observability, performance, and resilience while mentoring peers and raising engineering standards. This is a remote EMEA role, excluding France, aligned primarily to Central European and GMT collaboration hours.[Apply for this job](#job-application)[View company](https://jobicy.com/company/spotify.md)ShareRemote from[EMEA](https://jobicy.com/job-region/emea.md)SalaryUndisclosedDepartment[Cybersecurity](https://jobicy.com/categories/cybersecurity.md)EmploymentFull TimeExperienceSeniorPublished5 Nov 2026Apply before5 Dec 2026Listing views37Application actions0Application toolkit ## Make your next move. Prepare your resume, explore your fit, and draft a cover letter for this opportunity. Opportunity details ## About this role. The Platform mission creates the technology that enables Spotify to learn quickly and scale easily, enabling rapid growth in our users and our business around the globe. Spanning many disciplines, we work to make the business work; creating the infrastructure, tooling, frameworks, and capabilities needed to welcome a billion customers. Within Platform, the User Platform studio builds foundational capabilities that support Spotify’s user experiences at scale. The Identity and Access Management (IAM) domain focuses on the systems and services that help users securely access Spotify, while enabling product teams to build reliable, seamless experiences. We’re looking for a Staff Engineer to help shape the technical direction of the capabilities in this domain. You’ll work across teams to solve complex engineering challenges, improve the reliability and security of critical systems, and influence how we build scalable identity infrastructure for the future. ### What You’ll Do * Drive technical direction, guide architectural decisions, and lead complex engineering initiatives to evolve Spotify’s identity and access management systems. * Design and evolve distributed systems that support authentication, authorization, and identity-related capabilities across Spotify’s platform. * Partner with engineers, product managers, and security specialists to identify opportunities, align priorities, and deliver improvements to foundational platform capabilities. * Improve system reliability, performance, observability, and operational resilience, ensuring our identity services can support Spotify’s continued growth. * Mentor and support engineers across User Platform, sharing knowledge, raising engineering standards, and creating an environment where others can grow. * Encourage thoughtful experimentation, continuous improvement, and collaboration while taking ownership of meaningful technical outcomes. ### Who You Are * You have extensive experience designing, building, and operating large-scale systems across different platforms. * You have a deep understanding of identity and access management concepts, including authentication, authorization, customer identity lifecycle management (e.g., account creation, user state, and account recovery), and secure access patterns. * You have experience influencing architecture and technical direction across multiple engineering teams, even when you don’t have direct authority over their work. * You know how to evaluate complex technical trade-offs and make pragmatic decisions that balance security, reliability, performance, and developer experience. * You care about building resilient, observable, and maintainable systems and have experience improving services operating at significant scale. * You communicate complex technical ideas clearly, bring different perspectives into decisions, and help teams move forward together. * You enjoy mentoring engineers, sharing knowledge, and creating an inclusive environment where people can contribute, learn, and do their best work. ### Where You’ll Be * We offer you the flexibility to work where you work best! For this role, you can be within the EMEA region as long as we have a[work location](https://lifeatspotify.com/being-here/work-from-anywhere) (excluding France due to on-call restrictions). * This team operates within the Central European and GMT time zone for collaboration. ### Compensation ### Additional Information Spotify is an equal opportunity employer. You are welcome at Spotify for who you are, no matter where you come from, what you look like, or what’s playing in your headphones. Our platform is for everyone, and so is our workplace. The more voices we have represented and amplified in our business, the more we will all thrive, contribute, and be forward-thinking! So bring us your personal experience, your perspectives, and your background. It’s in our differences that we will find the power to keep revolutionizing the way the world listens. At Spotify, we are passionate about inclusivity and making sure our entire recruitment process is accessible to everyone. We have ways to request reasonable accommodations during the interview process and help assist in what you need. If you need accommodations at any stage of the application or interview process, please let us know – we’re here to support you in any way we can. Show more [Apply now >](https://jobicy.com/jobs/159119-staff-engineer-identity-and-access-management-user-platform.md) > Annual salary information is not provided for this position. Explore salary ranges for similar roles in our [Salary Directory ›](https://jobicy.com/salaries.md) * ![Upload CV](data:image/svg+xml;base64,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) ### Upload your resume now To unlock remote work opportunities and be discovered by global employers. This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content. ## Role DNA A quick view of the complexity, pace, ownership and collaboration implied by the job description. ### Job Complexity 5/5EasyHard ### Pace & Pressure 4/5RelaxedFast-paced ### Autonomy Level 5/5GuidedFull ownership ### Communication Load 5/5IndependentCollaborative AI insightThis is a staff-level position responsible for technical direction across critical, large-scale identity systems. The work involves complex security, availability, performance, and organizational trade-offs without direct authority over all contributing teams. ## Salary analysis Estimated compensation compared with the broader US market for similar roles. Estimated job median (per year)Market rate$210,000US market range (per year)$180k–$260k0$286k AI insightThe yearly pay period is inferred from the job context; it was not explicitly stated by the employer. No employer salary was disclosed. Estimated annual US-market compensation for a Staff Engineer specializing in large-scale identity and access management is approximately $180,000–$260,000 USD, with a midpoint of $210,000 USD; this is an AI estimate and not employer-provided compensation. ## Core skills Skills and capabilities most closely associated with this opportunity. [Identity and Access Management](https://jobicy.com/jobs?search_keywords=Identity%20and%20Access%20Management.md)[Authentication](https://jobicy.com/jobs?search_keywords=Authentication.md)[Authorization](https://jobicy.com/jobs?search_keywords=Authorization.md)[Distributed Systems](https://jobicy.com/jobs?search_keywords=Distributed%20Systems.md)[System Architecture](https://jobicy.com/jobs?search_keywords=System%20Architecture.md)[Security Engineering](https://jobicy.com/jobs?search_keywords=Security%20Engineering.md)[Account Lifecycle Management](https://jobicy.com/jobs?search_keywords=Account%20Lifecycle%20Management.md)[Observability](https://jobicy.com/jobs?search_keywords=Observability.md)[Site Reliability Engineering](https://jobicy.com/jobs?search_keywords=Site%20Reliability%20Engineering.md)[Performance Engineering](https://jobicy.com/jobs?search_keywords=Performance%20Engineering.md)[Operational Resilience](https://jobicy.com/jobs?search_keywords=Operational%20Resilience.md)[Technical Leadership](https://jobicy.com/jobs?search_keywords=Technical%20Leadership.md)[Cross-functional Collaboration](https://jobicy.com/jobs?search_keywords=Cross-functional%20Collaboration.md)[Mentoring](https://jobicy.com/jobs?search_keywords=Mentoring.md) Sample interview questionsHow would you design an authentication platform that remains reliable during a dependency outage?I would identify critical dependencies, define clear failure modes, and use timeouts, circuit breakers, retries with backoff, and carefully scoped caching where security permits. I would also establish graceful degradation paths, monitor authentication success and latency metrics, and regularly validate recovery procedures through failure testing. How do you balance security, reliability, and developer experience when designing authorization capabilities? I start by defining the security invariants and threat model, then make the secure path the easiest supported integration path. I use well-documented APIs, policy abstractions, safe defaults, observability, and migration support so product teams can adopt controls without creating unnecessary operational friction. Describe how you influence architecture across teams when you do not manage them directly. I build alignment through a shared understanding of the problem, measurable outcomes, and transparent trade-offs. I involve affected teams early, write clear decision records, seek feedback, and pair strategic recommendations with practical implementation guidance and ownership boundaries. What metrics would you use to assess the health of a large-scale IAM service? I would track authentication and authorization success rates, latency percentiles, error categories, dependency health, token issuance and validation failures, account-recovery completion, availability, and incident recovery times. I would segment these metrics by client, region, and flow to detect localized regressions quickly. How would you approach modernizing a legacy identity service with many internal consumers? I would first map consumers, contracts, data flows, and security risks, then define a target architecture and incremental migration plan. I would preserve compatibility where needed, introduce versioned interfaces and telemetry, migrate high-value paths in stages, and use adoption metrics and rollback mechanisms to manage risk. Next step ## Apply now. Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information. Keep exploring ## Related remote jobs. * ![Keyfactor, Inc. logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/ba8ae349-221.png) Keyfactor, Inc. Nov 5 New ### [Senior Solutions Consultant](https://jobicy.com/jobs/159061-senior-solutions-consultant-3.md) About Keyfactor Our mission is to securely connect the world: humans, machines, and AI. Keyfactor is the leader in trust infrastructure for AI and machines, helping the world’s largest enterprises… * ![CertiK logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/03/Jobicy-210308091023-955845.jpg) CertiK Nov 5 New ### [Blockchain Security Expert – AI Track](https://jobicy.com/jobs/152451-blockchain-security-expert-ai-track.md) About the Company CertiK is the largest blockchain security auditor and provides a comprehensive suite of tools to secure the industry at scale. To date, CertiK has worked with over… * ![CertiK logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/03/Jobicy-210308091023-955845.jpg) CertiK Nov 5 New ### [Blockchain Security Engineer – Senior Level (Solidity / Rust / Golang )](https://jobicy.com/jobs/152447-blockchain-security-engineer-senior-level-solidity-rust-golang.md) About the Role: We are seeking a Senior Blockchain Security Engineer with a strong security mindset and deep technical expertise across smart contracts, blockchain nodes, and decentralized infrastructure. You will… * ![Brain Co. logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/b2bdd014-221.png) Brain Co. Nov 4 New ### [AI Application Security Engineer](https://jobicy.com/jobs/158889-ai-application-security-engineer.md) Our Mission Rebuild how the world works, to make institutions work better for the people they serve. About Brain Co. Brain Co. builds AI-native operating systems for large, regulated institutions…. * ![Liftoff logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/c47aea9f-221.png) Liftoff Nov 3 New ### [Application Security Engineer, Generative AI](https://jobicy.com/jobs/158817-application-security-engineer-generative-ai.md) Liftoff is a leading AI-powered performance marketing platform for the mobile app economy. Our end-to-end technology stack helps app marketers acquire and retain high-value users, while enabling publishers to maximize… * ![Chainguard logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/e4b6aacf-221.jpeg) Chainguard Nov 3 New ### [Security Analyst (Governance and Trust)](https://jobicy.com/jobs/158783-security-analyst-governance-and-trust.md) Chainguard is the trusted source for open source. By delivering hardened, secure, and production-ready builds of all the open source software engineers and AI agents rely on, Chainguard helps organizations… * ![Lightspeed Commerce logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/09/3d38005a-221.png) Lightspeed Commerce Nov 3 New ### [Senior Engineer, Application Security](https://jobicy.com/jobs/158761-senior-engineer-application-security.md) Hi there! Thanks for stopping by 👋 Are you actively looking for a new opportunity? Or just checking the market? Well… you might just be in the right place! As… * ![Tenable logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/01879e02-221.jpg) Tenable Nov 3 New ### [Senior Enterprise Security Engineer](https://jobicy.com/jobs/158725-senior-enterprise-security-engineer.md) Who is Tenable? Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent… * ![Chainguard logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/e4b6aacf-221.jpeg) Chainguard Nov 3 ### [GRC Analyst (EMEA)](https://jobicy.com/jobs/158638-grc-analyst-emea.md) Chainguard is the trusted source for open source. By delivering hardened, secure, and production-ready builds of all the open source software engineers and AI agents rely on, Chainguard helps organizations… * ![GitLab logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2020/12/WRILS-201207055737-109952.jpg) GitLab Nov 3 ### [Staff Software Engineer, Security Factory: Static Analysis](https://jobicy.com/jobs/158635-staff-software-engineer-security-factory-static-analysis.md) GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50… [Browse all jobs](https://jobicy.com/jobs.md)