Senior Software Engineer - Identity & Access (Open to remote across ANZ)

Auckland, Auckland, New Zealand

Apply now Apply later

Job Description

Join the team redefining how the world experiences design.

Hey, g'day, mabuhay, kia ora, 你好, hallo, vítejte!

Thanks for stopping by. We know job hunting can be a little time consuming and you're probably keen to find out what's on offer, so we'll get straight to the point.

Where and how you can work

Our flagship campus is in Sydney. We also have a campus in Melbourne and co-working spaces in Brisbane, Perth and Adelaide. But you have choice in where and how you work, we trust our Canvanauts to choose the balance that empowers them and their team to achieve their goals.

What you’d be doing in this role

As Canva scales change continues to be part of our DNA. But we like to think that's all part of the fun. So this will give you the flavour of the type of things you'll be working on when you start, but this will likely evolve.

About the group/team

The Security Group is responsible for protecting Canva systems and data from information security threats. The group runs programs across Identity and Access Management, Application Security, Risk Management, Enterprise Security, and Threat Detection and Response domains. Our teams work together, and with other groups, to deliver preventive and detective controls and processes that reduce security risk.

Identity and Access team (I&A) builds and runs services across Canva to ensure minimal access to our most sensitive services which store customer data. We develop and drive adoption of high security consequence features for all staff at Canva to leverage.

The Identity and Access team takes charge for solving security-specific problems, using security domain expertise to unblock engineering to work on Canva-differentiating features. Our mission is to drive unified authentication and authorization across internal systems and data, focused on building flexible user-centric platforms to eliminate risk for Canva and our customers. 

Role Responsibilities:

  • Designing and implementing authentication and authorization systems that enable Canva teams to move safely and quickly. 

  • Owning the full lifecycle of features, from design docs and stakeholder alignment through implementation, testing, rollout, and maintenance

  • Working collaboratively with other partner teams such as Cloud, Developer Platform and IT to build systems that scale beyond our team. 

  • Integrating our tools with our cloud platforms (AWS, GCP), internally developed platforms and the various SaaS tools we use like Salesforce, Snowflake and others. 

  • Driving adoption of our systems internally, championing the benefits of what we build. 

  • Responding to incidents as a part of an on-call roster to ensure reliable access to production infrastructure. 

Required Experience:

  • You have (5-8+ years) of backend experience in one or more programming languages (ideally Golang), and can directly contribute to the design and implementation of features.

  • Solid understanding of identity and authorization standards like OAuth, OpenID Connect, and SAML.

  • Ability to design and build platform features, owning the whole solution end-to-end.

  • Subject-matter expertise in one or more of cloud platform technologies such as Amazon Web Services or Google Cloud Platform.

  • Experience with testing frameworks and strategies, e.g. unit testing, system testing, and integration testing.

Nice to have:

  • An understanding of policy-as-code methodologies such as OPA and rego policies. 

  • Experience with infrastructure tools like Terraform, Helm, K8s, or similar.

  • Understanding of RBAC, ABAC, PBAC and ACL access management approaches.

  • Experience working with CI/CD systems and defining integration pipelines.

  • Experience with frontend development using JavaScript frameworks.

  • An understanding of corporate identity and IT systems such as Okta, Jamf, Kandji etc.

What's in it for you?

Achieving our crazy big goals motivates us to work hard - and we do - but you'll experience lots of moments of magic, connectivity and fun woven throughout life at Canva, too. We also offer a range of benefits to set you up for every success in and outside of work.

Here's a taste of what's on offer:

  • Equity packages - we want our success to be yours too
  • Inclusive parental leave policy that supports all parents & carers
  • An annual Vibe & Thrive allowance to support your wellbeing, social connection, office setup & more
  • Flexible leave options that empower you to be a force for good, take time to recharge and supports you personally

Check out lifeatcanva.com for more info.

Other stuff to know

We make hiring decisions based on your experience, skills and passion, as well as how you can enhance Canva and our culture. When you apply, please tell us the pronouns you use and any reasonable adjustments you may need during the interview process.

We celebrate all types of skills and backgrounds at Canva so even if you don’t feel like your skills quite match what’s listed above - we still want to hear from you!

Please note that interviews are conducted virtually.

Apply now Apply later

* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰

Job stats:  2  0  0

Tags: Application security AWS CI/CD Cloud GCP Golang Helm IAM Jamf JavaScript Kubernetes Okta OpenID Risk management SaaS SAML Snowflake Terraform Threat detection

Perks/benefits: Flex hours Parental leave

Regions: Remote/Anywhere Asia/Pacific
Country: New Zealand

More jobs like this

Explore more career opportunities

Find even more open roles below ordered by popularity of job title or skills/products/technologies used.