Job description

P-211 Summary At Databricks, we are obsessed with enabling data teams to solve the world's toughest problems, from security threat detection to cancer drug development. We do this by building and running the world's best data and AI infrastructure platform, so our customers can focus on the high-value challenges that are central to their missions. Our engineering teams build highly technical products that fulfill real, important needs in the world. We constantly push the boundaries of data and AI technology, while simultaneously operating with the resilience, security, and scale that is critical to making customers successful on our platform. Customers trust Databricks with their most valuable data and Trust & Safety has the mission to build the most trusted data analytics and ML platform in the world. Security Engineering is an integral part of Trust & Safety and has a critical role to play in keeping customer data from bad actors. We are looking for senior leaders such as yourselves to create the vision and define the strategy for this space. We are hiring a Staff Software Engineer for the Access Management team at Databricks, based in Bellevue, WA. Access Management owns the access-gating systems at the core of the Databricks platform – the services that decide, for every user, application, and automated workload, what they are permitted to do. You will set technical direction for the Bellevue engineers and partner with our Mountain View technical lead on a team distributed across both sites. What you'll work on : Evolving the platform's core authorization service – the system is on the critical path of every access-control decision. Migrating and consolidating permission-checking across the platform onto a unified authorization model. Building fine-grained access controls: scoped service identities, delegated access, and role-based access control. Network ingress access policy for customer resources. Raising the availability and reliability of a high-throughput, low-latency authorization service. What we're looking for: Deep expertise in access management, identity, or authorization systems. Strong distributed systems and security fundamentals. Demonstrated technical leadership on a team, ideally across multiple locations. Track record of designing and shipping backend services at scale. Pay Range Transparency Databricks is committed to fair and equitable compensation practices. The pay range(s) for this role is listed below and represents the expected salary range for non-commissionable roles or on-target earnings for commissionable roles. Actual compensation packages are based on several factors that are unique to each candidate, including but not limited to job-related skills, depth of experience, relevant certifications and training, and specific work location. Based on the factors above, Databricks anticipates utilizing the full width of the range. The total compensation package for this position may also include eligibility for annual performance bonus, equity, and the benefits listed above. For more information regarding which range your location is in visit our page here . Local Pay Range $180,500 — $203,025 USD About Databricks Databricks is the Data and AI company. More than 20,000 organizations worldwide — including adidas, AT&T, Bayer, Block, Mastercard, Rivian, Unilever, and 70% of the Fortune 500 — rely on the Databricks Data + AI Platform to build and scale data and AI apps, analytics and agents. Headquartered in San Francisco with 30+ offices around the globe, Databricks offers a unified platform that includes Genie, Lakebase, Agent Bricks, Lakeflow, Lakehouse, and Unity Catalog. To learn more, follow Databricks on LinkedIn , X , YouTube , and Instagram . Benefits At Databricks, we strive to provide comprehensive benefits and perks that meet the needs of all of our employees. For specific details on the benefits offered in your region click here . Our Commitment to Diversity and Inclusion At Databricks, we are committed to fostering a diverse and inclusive culture where everyone can excel. We take great care to ensure that our hiring practices are inclusive and meet equal employment opportunity standards. Individuals looking for employment at Databricks are considered without regard to age, color, disability, ethnicity, family or marital status, gender identity or expression, language, national origin, physical and mental ability, political affiliation, race, religion, sexual orientation, socio-economic status, veteran status, and other protected characteristics. Compliance If access to export-controlled technology or source code is required for performance of job duties, it is within Employer's discretion whether to apply for a U.S. government license for such positions, and Employer may decline to proceed with an applicant on this basis alone.

Requirements

Must-haves

Evolving the platform's core authorization service – the system is on the critical path of every access-control decision.
Migrating and consolidating permission-checking across the platform onto a unified authorization model.
Building fine-grained access controls: scoped service identities, delegated access, and role-based access control.
Network ingress access policy for customer resources.
Raising the availability and reliability of a high-throughput, low-latency authorization service.
Deep expertise in access management, identity, or authorization systems.
Strong distributed systems and security fundamentals.
Demonstrated technical leadership on a team, ideally across multiple locations.
Track record of designing and shipping backend services at scale.
Our Commitment to Diversity and Inclusion

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aiml

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

Vision