[All remote jobs](https://jobicy.com/jobs.md)[![Canonical logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/b4d068a9-221-1.png)](https://jobicy.com/company/canonical-ltd.md)[Canonical](https://jobicy.com/company/canonical-ltd.md) # Staff Software Engineer for Identity Management (Go/Golang) AI Summary Canonical is seeking a staff-level software engineer to lead the design and delivery of identity and access management capabilities across enterprise products and web services. The role focuses on authentication, authorization, API development, and modernization of the IAM stack using Go and Python. The engineer will own technical direction, review code, guide integrations, and contribute Juju operators for operational concerns. This is a remote role across the Americas and EMEA, requiring collaboration with a distributed team and limited international travel for events.[Apply for this job](#job-application)[View company](https://jobicy.com/company/canonical-ltd.md)ShareRemote from[USA](https://jobicy.com/job-region/usa.md), [Canada](https://jobicy.com/job-region/canada.md), [EMEA](https://jobicy.com/job-region/emea.md)+1 more, [LATAM](https://jobicy.com/job-region/latam.md)SalaryUndisclosedDepartment[Software Engineering](https://jobicy.com/categories/engineering.md)EmploymentFull TimeExperienceSeniorPublished7 Nov 2026Apply before7 Dec 2026Listing views41Application actions1Application toolkit ## Make your next move. Prepare your resume, explore your fit, and draft a cover letter for this opportunity. Opportunity details ## About this role. [Canonical](https://jobicy.com/company/canonical-ltd.md) is a leading provider of open source software and operating systems to the global enterprise and technology markets. Our platform, Ubuntu, is very widely used in breakthrough enterprise initiatives such as public cloud, data science, AI, engineering innovation, and IoT. Our customers include the world’s leading public cloud and silicon providers, and industry leaders in many sectors. The company is a pioneer of global distributed collaboration, with 1200+ colleagues in 75+ countries and very few office-based roles. Teams meet two to four times yearly in person, in interesting locations around the world, to align on strategy and execution. The company is founder-led, profitable, and growing. We are hiring a Staff-level Software Engineer for Identity Management to work on authorization and access management across Canonical’s suite of enterprise products and web services, using Go (Golang) and Python. As a software engineer for Identity Management products of Canonical, you will modernize and expand the capabilities of the identity management solutions we use for authentication and authorization in our products, as well as our[canonical.com](https://canonical.com) and[ubuntu.com](https://ubuntu.com) websites. Your work on Identity Management will directly impact the users of all Canonical products. In addition, you will help write [Juju](https://juju.is/) charms to manage operational concerns. Technical excellence and a background in software engineering are necessary prerequisites for this role. You will be expected to own the design and delivery of the system, facilitate integrations and work with your team on strategy and execution. Location: This role will be based remotely in the EMEA and AMER regions. ### The role entails * Collaborate proactively with a distributed team, leading technical efforts and discussions * Write clean web service APIs to support both CLI and web frontend clients, using Go (Golang) and Python * Design and implement new features and enhancements from spec to production and ongoing operations at scale * Review code produced by other engineers, helping set quality standards * Discuss ideas and collaborate on finding good solutions * Create and enhance management, authentication and authorization API endpoints * Craft end-user authentication flows from design to implementation * Write [Juju](https://juju.is/) charms (operators) to manage operational concerns * Modernize the identity stack of our websites and products by driving adoption of best-of-breed IAM technologies * Deliver great products that users love by maintaining a culture of quality and engineering excellence * Work from home with global travel 2 to 4 weeks per year for internal and external events ### What we are looking for in you * You are a staff-level or experienced senior software engineer, with specific experience building identity and access management products * You are familiar with the open source software, standards, protocols and concepts in the identity space (e.g. OpenID, OAuth, LDAP) * You have experience implementing authorization frameworks in distributed systems * You value secure coding and standards, and enjoy working on teams that do the same * You are comfortable with Ubuntu as a development and deployment platform In addition: * Exceptional academic track record from both high school and university * Undergraduate degree in a technical subject or a compelling narrative about your alternative chosen path * Professional written and spoken English with excellent presentation skills * Excellent interpersonal skills, curiosity, flexibility, and accountability * Ability to travel internationally twice a year for company events up to two weeks long ### What we offer colleagues We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognize outstanding performance. In addition to base pay, we offer a performance-driven annual bonus or commission. We provide all team members with additional benefits which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally. * Distributed work environment with twice-yearly team conferences in person * Personal learning and development budget of USD 2,000 per year * Annual compensation review * Recognition rewards * Annual holiday leave * Maternity and paternity leave * Team Member Assistance Program & Wellness Platform * Opportunity to travel to new locations to meet colleagues * Priority Pass and travel upgrades for long-haul company events ### About Canonical Canonical is a pioneering tech firm at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open-source projects and the platform for AI, IoT, and the cloud, we are changing the world of software. We recruit on a global basis and set a very high standard for people joining the company. We expect excellence; in order to succeed, we need to be the best at what we do. Most colleagues at Canonical have worked from home since our inception in 2004.​ Working here is a step into the future and will challenge you to think differently, work smarter, learn new skills, and raise your game. Canonical is an equal opportunity employer We are proud to foster a workplace free from discrimination. Diversity of experience, perspectives, and background create a better work environment and better products.[Whatever your identity, we will give your application fair consideration.](https://canonical.com/careers/diversity/identity) #LI-remote Show more [Apply now >](https://jobicy.com/jobs/159594-staff-software-engineer-for-identity-management-go-golang.md) > Annual salary information is not provided for this position. Explore salary ranges for similar roles in our [Salary Directory ›](https://jobicy.com/salaries.md) * ![Upload CV](data:image/svg+xml;base64,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) ### Upload your resume now To unlock remote work opportunities and be discovered by global employers. This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content. ## Role DNA A quick view of the complexity, pace, ownership and collaboration implied by the job description. ### Job Complexity 5/5EasyHard ### Pace & Pressure 4/5RelaxedFast-paced ### Autonomy Level 5/5GuidedFull ownership ### Communication Load 4/5IndependentCollaborative AI insightThe position requires staff-level technical ownership of security-sensitive distributed identity systems, including authorization frameworks and standards such as OAuth, OpenID, and LDAP. It also demands architectural leadership, production delivery, and influence across a globally distributed engineering organization. ## Salary analysis Estimated compensation compared with the broader US market for similar roles. Estimated job median (per year)Market rate$190,000US market range (per year)$155k–$230k0$253.00k AI insightThe yearly pay period is inferred from the job context; it was not explicitly stated by the employer. No employer base salary is disclosed. The annual compensation figures are estimated USD market ranges for a remote staff-level IAM software engineering role; the yearly period is inferred from standard full-time professional compensation conventions. ## Core skills Skills and capabilities most closely associated with this opportunity. [Go](https://jobicy.com/jobs?search_keywords=Go.md)[Python](https://jobicy.com/jobs?search_keywords=Python.md)[Identity and Access Management](https://jobicy.com/jobs?search_keywords=Identity%20and%20Access%20Management.md)[OAuth](https://jobicy.com/jobs?search_keywords=OAuth.md)[OpenID Connect](https://jobicy.com/jobs?search_keywords=OpenID%20Connect.md)[LDAP](https://jobicy.com/jobs?search_keywords=LDAP.md)[Authorization frameworks](https://jobicy.com/jobs?search_keywords=Authorization%20frameworks.md)[Authentication flows](https://jobicy.com/jobs?search_keywords=Authentication%20flows.md)[REST API design](https://jobicy.com/jobs?search_keywords=REST%20API%20design.md)[Distributed systems](https://jobicy.com/jobs?search_keywords=Distributed%20systems.md)[Secure coding](https://jobicy.com/jobs?search_keywords=Secure%20coding.md)[Juju](https://jobicy.com/jobs?search_keywords=Juju.md)[Ubuntu](https://jobicy.com/jobs?search_keywords=Ubuntu.md)[Code review](https://jobicy.com/jobs?search_keywords=Code%20review.md) Sample interview questionsHow would you design an authorization service for several distributed products with different client types?I would begin by defining shared identity, policy, resource, and permission models, then establish clear API and token-validation contracts. I would use standards-based authentication, centralized policy evaluation where appropriate, strong audit logging, and carefully designed caching to balance consistency, latency, and availability. What security considerations are most important when implementing OAuth or OpenID Connect flows? Key considerations include validating issuer, audience, signatures, expiration, nonce, and state; using PKCE for public clients; protecting redirect URIs; rotating signing keys; and applying least-privilege scopes. I would also ensure sensitive tokens are never exposed through logs, URLs, or insecure client storage. Describe how you would migrate a legacy identity stack without disrupting users. I would map existing identities, credentials, flows, integrations, and dependencies before creating a phased migration plan. I would run old and new systems in parallel where feasible, introduce compatibility layers, monitor authentication success and latency, communicate changes early, and maintain tested rollback paths. How do you maintain engineering quality while leading a distributed team? I set clear technical standards through design documents, lightweight architecture reviews, automated tests, secure coding checks, and constructive code review. I also make decisions and rationale visible asynchronously, create space for discussion, and mentor engineers so quality ownership is shared rather than centralized. What would your approach be to operating an IAM API at scale? I would define reliability and security objectives, instrument authentication and authorization paths, and monitor latency, error rates, token-validation failures, and suspicious activity. I would build resilient deployment, rollback, secret-management, backup, and incident-response practices, then continuously improve them through post-incident reviews. Next step ## Apply now. Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information. Keep exploring ## Related remote jobs. * ![Headway.co logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/12/068391a61855fb604bca051cafe3c510.jpeg) Headway.co Nov 7 New ### [Staff Software Engineer (Journeys)](https://jobicy.com/jobs/159647-staff-software-engineer-journeys.md) 1 in 4 people in the US have a treatable mental health condition, but most providers don’t accept insurance, making therapy too expensive for most people. Headway’s mission is to… * ![Headway.co logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/12/068391a61855fb604bca051cafe3c510.jpeg) Headway.co Nov 7 New ### [Staff Software Engineer – Experimentation](https://jobicy.com/jobs/159641-staff-software-engineer-experimentation.md) 1 in 4 people in the US have a treatable mental health condition, but most providers don’t accept insurance, making therapy too expensive for most people. Headway’s mission is to… * ![Welo Global logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/06/83c40f94-221.webp) Welo Global Nov 7 New ### [German Advertising Reviewer](https://jobicy.com/jobs/159635-german-advertising-reviewer.md) Location: Spain, Remote (Work from Home) Type: Freelance, Part-time, Flexible Hours About the Role: We are looking for a passionate and tech-savvy individual to join our team as a German… * ![Welo Global logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/06/83c40f94-221.webp) Welo Global Nov 7 New ### [English to Ukrainian Review Lead for UI, Marketing & Product Content](https://jobicy.com/jobs/159619-english-to-ukrainian-review-lead-for-ui-marketing-product-content.md) About Welo Global Welo Global is a leader in multilingual AI, technology, and content solutions serving over 2,000 clients in 300 languages. The company combines globally scaled multilingual infrastructure, including… * ![Welo Global logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/06/83c40f94-221.webp) Welo Global Nov 7 New ### [English to Slovenian Review Lead for UI, Marketing & Product Content](https://jobicy.com/jobs/159618-english-to-slovenian-review-lead-for-ui-marketing-product-content.md) About Welo Global Welo Global is a leader in multilingual AI, technology, and content solutions serving over 2,000 clients in 300 languages. The company combines globally scaled multilingual infrastructure, including… * ![Welo Global logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/06/83c40f94-221.webp) Welo Global Nov 7 New ### [English to Slovak Review Lead for UI, Marketing & Product Content](https://jobicy.com/jobs/159617-english-to-slovak-review-lead-for-ui-marketing-product-content.md) About Welo Global Welo Global is a leader in multilingual AI, technology, and content solutions serving over 2,000 clients in 300 languages. The company combines globally scaled multilingual infrastructure, including… * ![Welo Global logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/06/83c40f94-221.webp) Welo Global Nov 7 New ### [English to Serbian (Cyrillic) Review Lead for UI, Marketing & Product Content](https://jobicy.com/jobs/159616-english-to-serbian-cyrillic-review-lead-for-ui-marketing-product-content.md) About Welo Global Welo Global is a leader in multilingual AI, technology, and content solutions serving over 2,000 clients in 300 languages. The company combines globally scaled multilingual infrastructure, including… * ![Welo Global logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/06/83c40f94-221.webp) Welo Global Nov 7 New ### [English to Latvian Review Lead for UI, Marketing & Product Content](https://jobicy.com/jobs/159612-english-to-latvian-review-lead-for-ui-marketing-product-content.md) About Welo Global Welo Global is a leader in multilingual AI, technology, and content solutions serving over 2,000 clients in 300 languages. The company combines globally scaled multilingual infrastructure, including… * ![Canonical logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/b4d068a9-221-1.png) Canonical Nov 7 New ### [Staff Engineer, Development Lifecycle](https://jobicy.com/jobs/159593-staff-engineer-development-lifecycle.md) Lead our effort to get Ubuntu fit for applications in automotive, aerospace, industrial robotics and other highly regulated environments. Ubuntu is already the world’s most widely used Linux in general;… * ![Canonical logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/b4d068a9-221-1.png) Canonical Nov 7 New ### [Software Engineer – Python/Golang – Kubernetes](https://jobicy.com/jobs/159591-software-engineer-python-golang-kubernetes.md) Canonical is a leading provider of open source software and operating systems to the global enterprise and technology markets. Our platform, Ubuntu, is very widely used in breakthrough enterprise initiatives… [Browse all jobs](https://jobicy.com/jobs.md)