Software Engineer II - Identity & Access Management

About this role

Join Klaviyo's Identity & Access Management team to design and build enterprise-grade authentication and authorization services that power the platform. You'll own features end-to-end—from login and MFA to SSO and API security—while modernizing the identity stack and enabling product teams to ship faster and more securely.

What you'll do

• Own authentication and authorization features end-to-end including design, implementation, rollout, and observability
• Extract auth capabilities from the legacy monolith into dedicated microservices and manage token verification and API key services
• Build and maintain shared SDKs and contracts for secure-by-default identity adoption across internal teams
• Collaborate with Organizations and Platform Integrity teams on org-scoped identity, multi-account SSO, and account protection
• Improve reliability and performance through instrumentation, metrics, alerting, and on-call participation
• Define platform-wide standards for authentication, authorization, audit logging, and integration patterns

What they're looking for

• Backend or full-stack production systems experience (2-5+ years)
• Data modeling, API design, concurrency, and failure mode reasoning
• Debugging and observability (logs, metrics, traces)
• Authentication and authorization expertise (OAuth, MFA, SSO, SCIM, RBAC)
• Distributed systems and microservices architecture
• Security-focused engineering and secure-by-default patterns
• Platform/infrastructure thinking and shared service design