Principal Engineer - Customer Identity Access Management (CIAM)

<div class="content-intro"><p>Fastly helps people stay better connected with the things they love. Fastly’s edge cloud platform enables customers to create great digital experiences quickly, securely, and reliably by processing, serving, and securing our customers’ applications as close to their end-users as possible — at the edge of the Internet. The platform is designed to take advantage of the modern internet, to be programmable, and to support agile software development. Fastly’s customers include many of the world’s most prominent companies, including GitHub, Yelp, Paramount, and JetBlue.</p> <p>We're building a more trustworthy Internet. Come join us.</p></div><p><strong>Posting Open Date</strong>: May 12, 2026</p> <p><strong>Anticipated Posting Close Date*</strong>: May 30, 2026</p> <p>*Job posting may close early due to the volume of applicants.</p> <p><br><strong>Principal Software Engineer - Customer Identity Access Management (CIAM)</strong></p> <p>Join our dynamic Customer Identity Access Management (CIAM) team as a Principal Software Engineer and play a pivotal role in building cutting-edge solutions that centralize and simplify how organizations manage user identities and profile data. Our CIAM team is committed to empowering customers with control over user access by providing advanced access control mechanisms, innovative authentication methods, progressive profiling, and a unified identity experience.</p> <p>We are looking for passionate, highly skilled software engineers to join our team and be an integral part of our mission. If you're eager to make a significant impact and contribute to the growth of a thriving CIAM ecosystem, we would love to have you on board. Let's build something remarkable together!</p> <p><strong>What You'll Do</strong></p> <ul> <li>Lead the technical direction, architecture, and evolution of Fastly’s CIAM systems and services.</li> <li>Design and build secure, scalable solutions for authentication, authorization, identity lifecycle, and related platform capabilities.</li> <li>Partner with engineering, product, and security teams to define roadmaps, align priorities, and address technical risks early.</li> <li>Drive adoption of modern, standards-based identity patterns and best practices across teams and systems.</li> <li>Improve the reliability, security, and maintainability of identity-related services through strong architectural decisions and operational rigor.</li> <li>Mentor engineers across the organization, helping raise the quality of technical design, implementation, and collaboration.</li> <li>Contribute to an inclusive engineering culture grounded in curiosity, pragmatism, and continuous improvement.</li> <li>Participate in on-call support rotation as needed.</li> </ul> <p><br><strong>What We're Looking For</strong></p> <ul> <li>Significant experience designing and operating authentication and authorization systems in production environments. Most Principals at Fastly have at least 10 years of related experience.</li> <li>Deep understanding of identity and access standards and technologies such as OIDC, OAuth, SAML, SCIM, JWT, and SSO.</li> <li>Experience with service-to-service authentication and secure communication patterns in distributed systems.</li> <li>Strong background in software architecture and system design, especially in areas of scalability, performance, reliability, and security.</li> <li>Demonstrated ability to lead complex technical initiatives across multiple teams and influence engineering direction at senior levels.</li> <li>Strong written and verbal communication skills, including the ability to produce clear technical documentation and align diverse stakeholders.</li> <li>Track record of mentoring and growing other engineers, both within your domain of expertise and more broadly across engineering.</li> </ul> <p><strong>Preferred Qualifications</strong></p> <ul> <li>Experience with Keycloak</li> <li>Production experience implementing Role and Attribute-based Access control systems</li> <li>Experience with Go, Java, or Ruby</li> </ul> <p><strong>Work Hours:</strong></p> <p>This position will require you to be available during core business hours and occasional nights and weekends as needed for on call support&nbsp;</p> <p>&nbsp;</p> <p><strong>Work Location(s) &amp; Travel Requirements:&nbsp;</strong></p> <p>The preferred hybrid locations f