Want to help us help others? We’re hiring!
GoFundMe is the world's most powerful community for good, dedicated to helping people help each other. By uniting individuals and nonprofits in one place, GoFundMe makes it easy and safe for people to ask for help and support causes, for themselves and each other. Together, our community has raised more than $40 billion since 2010.
Join us! GoFundMe is hiring a Senior Staff Software Engineer, Identity & Access Management to lead the architecture, evolution, and reliability of our IAM platform. This is the foundational layer that every product team, enterprise customer, and internal service builds on. Your work will shape how millions of people authenticate, how enterprise nonprofit partners federate into GoFundMe, and how engineering teams across the company consume identity with confidence.
GoFundMe serves a uniquely broad surface area: consumer donors and recipients on one side, and a long tail of nonprofit partners on the other, ranging from small grassroots organizations to some of the largest charitable institutions in the world. That breadth, plus the merger history of our enterprise and consumer stacks, makes IAM both a core platform problem and a meaningful enterprise-grade challenge. You will set the technical direction for how those worlds converge into one secure, self-service, well-instrumented platform.
This role is one of three horizontal Identity Platform Engineers reporting to the Sr. Manager of Identity and Integrity Engineering. You will work alongside a Consumer Identity and Risk Signals engineer and a Policy and Data engineer to build the cross-cutting capabilities our product and operational stakeholders increasingly depend on. Your primary focus is enterprise and Pro identity: federation, provisioning, MFA orchestration, and policy enforcement.
The job
Define and evolve the end-to-end IAM architecture spanning authentication, authorization, session management, and token lifecycle across consumer and enterprise contexts. Establish the trust boundaries, integration contracts, and platform primitives that make the secure path the default for every team consuming identity services.
Own the enterprise identity onboarding experience for our nonprofit customers: repeatable, self-service SSO, SCIM provisioning, and multi-tenant trust patterns that scale without bespoke integration per partner.
Architect federation and provisioning patterns (OIDC, SAML 2.0, SCIM) that hold up across a wide range of enterprise IdP configurations, from large institutions to small grassroots organizations.
Make principled build vs. integrate decisions across vendor platforms (Descope, Auth0, Okta) and in-house systems, owning the tradeoffs, migration paths, and long-term cost of change.
Design and operate MFA orchestration and step-up authentication flows, integrating risk signals from the Consumer Identity and Risk Signals engineer to make adaptive, confident auth decisions without adding unnecessary friction for the legitimate majority.
Own the consumer identity platform , including Descope CIAM, session management, passwordless authentication, and social login, balancing security against funnel conversion with a lean toward the enterprise and Pro surfaces where IAM complexity is highest.
Establish policy enforcement architecture (PEP and PAP) and the contracts by which authorization decisions are reliably enforced at runtime across consumer and enterprise surfaces.
Own the IAM technical roadmap , prioritizing initiatives based on user impact, enterprise requirements, compliance obligations, and technical feasibility.
Partner with Consumer Identity and Risk Signals, Payments, Security, and Integrity as the IAM platform interface for the systems that depend on it.
Mentor engineers across the Identity team and the broader Platform Tribe, raising the bar on system design, security thinking, and operational rigor.
You
8+ years of software engineering experience, with significant time at senior, staff, or principal levels working on platform or infrastructure systems.
Deep, hands-on expertise with identity protocols and standards : OAuth 2.x, OpenID Connect, SAML 2.0, and SCIM. You can architect against these, not just integrate.
Track record of designing and shipping IAM or auth platforms that other engineering teams depend on in production at meaningful scale.
Demonstrated experience with enterprise identity at scale : SSO, SCIM provisioning, multi-tenant trust, IdP heterogeneity, and B2B platforms with a long tail of customer IdP configurations.
Experience architecting systems using federation standards, session and token management patterns, and well-defined trust boundaries , with an eye toward minimizing the cost of future change.
Strong security instincts : you threat-model as you design, understand credential risk and account takeover patterns, and build systems where the secure path is the easy path.
Strong observability and reliability skills : experience with monitoring, alerting, and incident response for mission-critical identity infrastructure.
Preferred
Hands-on experience with commercial identity platforms ( Descope, Auth0, Okta, Ping , or comparable) in production, including migration between providers.
Experience spanning both enterprise and consumer identity contexts , such as at fintech, SaaS, payments, or identity-forward companies.
Familiarity with advanced authorization models ( RBAC, ABAC, ReBAC ) and policy engines (OPA, Cedar), particularly the enforcement side.
Experience with compliance and audit requirements relevant to identity systems (SOC 2, PCI DSS, GDPR, CCPA) and data residency considerations.
Practical experience deploying and operating identity services on cloud infrastructure (AWS, GCP, or Azure) at scale.
Contributions to identity standards bodies, open-source identity projects, or published thought leadership in the IAM space.
Why you’ll love it here
Make an Impact : Be part of a mission-driven organization making a positive difference in millions of lives every year.
Innovative Environment : Work with a diverse, passionate, and talented team in a fast-paced, forward-thinking atmosphere.
Collaborative Team : Join a fun and collaborative team that works hard and celebrates success together.
Competitive Benefits : Enjoy competitive pay and comprehensive healthcare benefits.
Holistic Support : Enjoy financial assistance for things like hybrid work, family planning, along with generous parental leave, flexible time-off policies, and mental health and wellness resources to support your overall well-being.
Growth Opportunities : Participate in learning, development, and recognition programs to help you thrive and grow.
Commitment to DEI : Contribute to diversity, equity, and inclusion through ongoing initiatives and employee resource groups.
Community Engagement : Make a difference through our volunteering program.
We live by our core values: impatient to be great , find a way , earn trust every day , fueled by purpose . Be a part of something bigger with us!
GoFundMe is proud to be an equal opportunity employer that actively pursues candidates of diverse backgrounds and experiences. We do not discriminate on the basis of race, color, religion, ethnicity, nationality or national origin, sex, sexual orientation, gender, gender identity or expression, pregnancy status, marital status, age, medical condition, mental or physical disability, or military or veteran status.
The annual U.S. salary range for this full-time position is $233,500 - $321,200. The company also offers equity and other benefits to employees, including healthcare, dental, vision, life insurance and 401(k) saving program. In addition to this wage, there are geolocation differentials that will increase pay depending on the work location. Additionally pay may vary depending on other factors including skills, experience, education, or training. Your recruiter can share more about the specific total compensation package based on your location during the hiring process.
If you require a reasonable accommodation to complete a job application or a job interview or to otherwise participate in the hiring process, please contact us at accommodationrequests@gofundme.com .
Global Data Privacy Notice for Job Candidates and Applicants:
Depending on your location, the General Data Protection Regulation (GDPR) or certain US privacy laws may regulate the way we manage the data of job applicants. Our full notice outlining how data will be processed as part of the application procedure for applicable locations is available here . By submitting your application, you are agreeing to our use and processing of your data as required.
Learn more about GoFundMe:
We’re proud to partner with GoFundMe.org , an independent public charity, to extend the reach and impact of our generous community, while helping drive critical social change. You can learn more about GoFundMe.org’s activities and impact in their FY ‘25 annual report .
Our annual “Year in Help” report reflects our community’s impact in advancing our mission of helping people help each other.
For recent company news and announcements, visit our Newsroom .
Notice to Applicants for Jobs Located in NYC or Remote Jobs Associated With Office in NYC Only
We use Metaview as part of our hiring process for jobs in NYC and certain features may qualify it as an automated employment decision tool (AEDT), as defined by New York City Local Law 144. As part of the hiring process, we provide Metaview with job requirements and candidate submitted resumes and application materials to assist in evaluating job-related qualifications. While this tool is used to improve efficiency and support our recruiting personnel, all final hiring decisions are made by GoFundMe employees.
We began using Metaview on March 10, 2026. The Metaview tool has been reviewed by an independent auditor. Results of the audit may be viewed here . The tool evaluates your professional experience, technical skills, education, and other qualifications using information collected directly from your submitted resume and application materials; all such data is retained in accordance with GoFundMe’s Personnel Privacy Notice and applicable legal requirements. If you would like to request an alternative selection process or a reasonable accommodation, please contact accommodationrequests@gofundme.com .