Senior Engineer, StackOne

• Strong software engineering fundamentals — comfortable owning a system end-to-end in production
• Built or operated at least one of: an API gateway / management platform (Kong, Apigee, Zuplo, AWS API Gateway, and similar), MDM/UEM (Jamf, Kandji, Intune, Workspace ONE, Google Workspace MDM), EDR/XDR (CrowdStrike, SentinelOne, and similar), or a comparable policy-driven provisioning, posture, or access-control platform. Crossover across more than one of these is a real plus
• Built a policy or rules engine — authoring model, evaluation, enforcement, versioning. You know the difference between expressing a policy and enforcing it at runtime
• Identity systems — OAuth/OIDC, SAML, SSO, SCIM — with a real grasp of scopes, grants, token lifecycle, and least privilege in practice
• Telemetry and instrumentation of a system on the request path, and the trade-offs of monitoring without adding meaningful latency
• LLM an AI experience - you've used if not built MCP servers before, you understand the governance and guardrails problems linked to AI usage and have created AI Agents before

Desirable

• Provisioning lifecycle for tool access — enroll, grant, rotate, revoke — across our managed auth and connector-profile layer, so builders and end users never hand-wire OAuth apps
• Policy and enforcement — shape the authoring, versioning, and runtime enforcement of access policies (including LLM assisted policy generation): which agent, which tool, which scope, which data classes, conditional on identity and context. This is central to our agent-permissioning work
• Posture and risk — continuous assessment of connected tools and the SaaS behind them; surface risky scopes, stale grants, and anomalous invocation patterns
• Instrumentation and telemetry — deepen structured, queryable visibility into the tool calls flowing through the gateway, with the latency discipline of a system on the hot path
• Identity integration — extend our OAuth 2.1, SSO, and SCIM story so policy and provisioning stay bound to enterprise identity rather than bolted on
• Detection and response — the agent-era analog of EDR: define what "bad" looks like, surface it, and give operators the controls to contain it
• Reporting into engineering leadership, partnering closely with the founders (Romain, CEO; Guillaume, CTO) and the security and platform engineers
• This is a high-ownership role on a strategic pillar of StackOne's roadmap. You'll set be able to the technical direction for how StackOne governs agent access to tools, for the IT and security leaders who decide whether agents get to touch real systems