Software Engineer (Java, SQL)

About The Company
FusionAuth is a rapidly expanding startup and a leading provider of customer identity and access management (CIAM) software, headquartered in Denver, Colorado. Our mission is to simplify and secure authentication and authorization processes for developers worldwide. Our innovative product enables businesses to efficiently manage customer identities and access, delivering a seamless and secure user experience for some of the world's most prominent brands. As part of our growth trajectory, we are expanding our engineering team to accelerate product development, enhance security features, and explore new technological frontiers. FusionAuth's commitment to excellence and innovation positions us as a trusted partner in the identity management space, fostering a collaborative environment where technical expertise and creative problem-solving thrive.
About The Role
We are seeking a highly experienced Principal Engineer to lead our core development initiatives, shape architectural strategies, and serve as a technical authority within our organization. This role involves hands-on coding, architectural design, and strategic planning to ensure our platform remains scalable, secure, and aligned with industry standards. The ideal candidate will possess deep expertise in CIAM protocols such as OAuth 2.x, OIDC, SCIM, and SAML, and will be instrumental in guiding our technical roadmap. You will engage directly with enterprise customers, providing architectural guidance and solutions, and represent FusionAuth at industry events to bolster our technical credibility. Additionally, this role includes mentoring engineering teams, collaborating across departments, and staying abreast of emerging identity standards and trends. Your leadership will be pivotal in driving innovation and maintaining our position as a leader in the CIAM space.
Qualifications

• Bachelor’s degree in Computer Science or equivalent technical background
• Production-grade expertise in OAuth 2.x, OIDC, SCIM, and SAML protocols
• 12+ years of professional software engineering experience, including 5+ years focused on identity, authentication, or security
• Proven hands-on experience with shipping high-quality, secure production code
• Experience designing and supporting highly available, enterprise-grade distributed systems
• Background in deploying software across self-hosted, on-premise, or cloud environments with an understanding of backward compatibility and upgrade strategies
• Demonstrated ability to engage directly with enterprise customers and prospects on technical architecture and design
• Experience reviewing and approving technical design documents and architecture reviews
• Familiarity with emerging identity standards such as FIDO2/passkeys, DPoP, token binding, and related drafts
• Willingness to adopt AI-assisted development tools and methodologies
• Strong communication skills with the ability to articulate complex technical concepts clearly

Responsibilities

• Develop, review, and own high‑quality, secure production code within the FusionAuth core application, providing technical leadership in hands-on development activities
• Lead the architectural evolution of the platform, drafting and reviewing Technical Design Documents (TDDs) to ensure scalability, security, and maintainability
• Serve as an expert on CIAM protocols such as OAuth 2.x, OIDC, SCIM, and SAML, guiding their correct implementation across the product and resolving complex protocol questions
• Engage with enterprise prospects and customers to advise on architectural decisions and integration strategies, translating complex CIAM concepts for technical and semi-technical audiences
• Monitor industry trends related to identity standards, emerging protocols, and security practices, providing strategic insights to influence product roadmap and innovation
• Represent FusionAuth at industry conferences, working groups, and community events to build the company’s technical reputation and thought leadership
• Ensure deployment architecture considerations such as backward compatibility, API versioning, upgrade paths, and schema migration are integrated into product design
• Mentor and develop engineering team members, sharing knowledge through code reviews, architectural discussions, and informal learning sessions
• Collaborate closely with Product Management, Solutions Engineering, and Customer Success teams to address complex customer requirements and contribute to roadmap planning

Benefits

• Comprehensive health insurance coverage including medical, dental, and vision plans, with the company covering the majority of premiums
• Fully employer-paid High Deductible Health Plan (HDHP) with Health Savings Account (HSA) and employer contributions
• Basic life insurance and short- and long-term disability coverage fully paid by the company
• Voluntary life insurance options for employees and dependents
• Flexible Spending Accounts (FSAs) for healthcare and dependent care expenses
• 401(k) plan with company matching contributions
• Generous paid time off (PTO) and paid holidays to support work-life balance
• Employee Assistance Program (EAP) providing support for personal and professional challenges
• Opportunities for professional development, training, and career growth
• Eligibility for performance-based bonuses and variable compensation programs

Equal Opportunity
FusionAuth is committed to creating an inclusive and diverse workplace. We are an equal employment opportunity employer and do not discriminate against any employee or applicant for employment based on race, color, religion, national origin, gender, sexual orientation, gender identity or expression, age, disability, genetic information, veteran status, or any other protected characteristic under applicable federal, state, or local laws. We promote a culture of respect and equal opportunity, ensuring all individuals have the chance to thrive and contribute to our collective success.