Software Engineer II - Identity & Access Management (Core Infra IO)
Klaviyo is seeking a Software Engineer II to join the Identity & Access Management (IAM) team within the Core Infrastructure – Identity & Organizations (Core IO) pillar. This team is responsible for building and operating Klaviyo’s centralized authentication and authorization platform, which supports both human users and machine interactions. The IAM team plays a critical role in ensuring secure and efficient access across the platform, including services such as login, Single Sign-On (SSO), Multi-Factor Authentication (MFA), System for Cross-domain Identity Management (SCIM), internal service authentication, and external API authentication.
In this role, the Software Engineer II will own features end-to-end, encompassing design, implementation, rollout, and observability for core authentication and authorization capabilities. Responsibilities include developing login flows, enhancing MFA and SSO functionalities, implementing SCIM, managing sessions, and enforcing role and permission structures. The engineer will also contribute to extracting authentication and authorization paths from the legacy monolith into dedicated microservices, such as token verification and API key services. Additionally, the role involves building and maintaining shared Software Development Kits (SDKs) and contracts to facilitate quick adoption of IAM services by internal teams, ensuring secure-by-default patterns.
The ideal candidate has 2-5+ years of professional software engineering experience, with proficiency in at least one of the following languages: Python, Go, or TypeScript/JavaScript. Experience in building and operating backend or full-stack services in production is essential. A strong understanding of authentication and authorization concepts, including sessions, tokens, OAuth, SSO, MFA, and Role-Based Access Control (RBAC), is required. Familiarity with web services or APIs backed by relational databases and/or caches, such as MySQL, Postgres, or Redis, is also necessary. Exposure to Continuous Integration/Continuous Deployment (CI/CD) pipelines and modern development workflows, including code review, testing, deployments, and on-call participation, is expected.
The base salary for this position ranges from $116,000 to $174,000 annually, depending on factors such as the applicant’s job-related skills, relevant experience, education or training, and work location. In addition to the base salary, the total compensation package may include participation in the company’s annual cash bonus plan, equity opportunities, sign-on payments, and a comprehensive range of health, welfare, and wellbeing benefits based on eligibility.
Klaviyo fosters a collaborative and innovative company culture, emphasizing the empowerment of creators to own their destiny by making first-party data accessible and actionable. The company values diversity and inclusivity, encouraging individuals from various backgrounds to apply. Employees are supported with generous benefits and opportunities for professional growth, making Klaviyo an attractive workplace for those looking to make a significant impact in the field of identity and access management.