Senior Engineer - Auth
Datum’s mission is to help 1k clouds thrive in the AI era by unlocking internet superpowers for every builder. We’re working in the open to bring the foundational capabilities that all the big guys use (private networking, peering, direct interconnection, etc) into the hands of builders and modern “alt clouds” — no network team required.
One of Datum’s core values is to be connectors: of applications, services, networks, and people. As such, this role (just like all roles at Datum) will work directly with users, customers, partners, and the broader community.
Another key value is to be open by default, from how we license our code (AGPLv3) to how we communicate, engage with, and document our work. We believe this engenders trust from our customers and community, but also because open is the best way to build. It's more secure, more operable, and even more enjoyable.
Still interested? Read on!
The Role
We're seeking a senior/principal/staff level engineer focused on securely connecting 1k clouds together. Practically speaking, it means someone who wakes up every day thinking about federated authentication and authorization. Whether that's OAuth, SPIFFE, Authzed, Zitadel, k8s RBAC, or everything in between, the right candidate for this role can likely rattle off a few RFCs and has been dreaming of working on a system like this already.
You'll work extensively with distributed systems, vendor APIs, networking protocols, software-defined networking, and cloud-native infrastructure while solving complex orchestration challenges across multiple cloud providers and edge locations. This role combines a passion for security, open-source development, and building systems that other engineers love to use. If you're intrigued by what 1 billion networks would look like, talk to us!
What You'll Do
Control Plane Infrastructure & Architecture
Design, implement, and run Datum's core authentication and authorization stack
Build customer-facing solutions to help our alt-cloud ecosystem thrive
Scale the management, monitoring, and metering of every actor in our system, human or not
Partner with leadership to advance projects with key customers, partners, and suppliers
Distributed Systems & Performance
Design distributed solutions that scale from startup to hyperscale usage patterns
Implement intelligent traffic routing, load balancing, and failover
Build observability, monitoring, and diagnostic tools for complex environments
Optimize control plane performance for AI workloads and high-bandwidth applications with our network team
Open Source Leadership
Drive technical networking decisions in collaboration with our open-source community
Review and mentor contributions from external developers on networking components
Maintain high code quality standards and documentation for network APIs
Represent Datum at conferences and in technical working groups
Cloud-Native & AI Integration
Design networking solutions that integrate seamlessly with Kubernetes and AI patterns
Build network policies and security frameworks for multi-tenant cloud environments
Implement service mesh integration and east-west traffic optimization
Ensure compatibility with major cloud provider networking services (AWS, GCP, Azure)
About You
Authentication & Authorization
Strong working knowledge of OAuth in complex production environments with multiple IdPs, including social and commercial (AWS IAM, Azure Entra, GCP, Auth0, Okta, etc.)
Strong working knowledge of authorization (ABAC, RBAC, PBAC) and its ecosystem (Zanzibar, SpiceDB, OpenFGA, Cedar)
Experience with Workload Identity Federation and/or SPIFFE and opinions about where the puck is going
Distributed Systems & Infrastructure
5+ years of running large-scale production systems on Kubernetes or similar, with security as a first principle
Strong experience with distributed systems design, security, auth, consensus algorithms, async reconciliation, and fault tolerance
Enough familiarity with Kubernetes patterns and APIs that you can speak custom resources and admission controllers
Strong experience with infrastructure as code (Flux, Terraform, Pulumi) for provisioning
Familiarity with SRv6, edge computing, or modern network routing would be a huge plus
Open Source & Leadership
Track record of contributing to or maintaining networking-focused open-source projects
Experience mentoring engineers and driving technical decision-making in teams
Understanding of open-source governance, community building, and public development
Passion for building networking tools that other developers and operators love to use
Technology Stack
Languages: Go, Rust
Data: PostgreSQL, GraphQL, Elasticsearch, Meilisearch
Infrastructure: Kubernetes, Flux, Pulumi, Zitadel
Cloud Platforms: Cloudflare, AWS, GCP, Azure, multi-cloud networking
Monitoring: Prometheus, Grafana, OpenTelemetry, network flow analysis
Development: GitHub, CI/CD, automated testing, network simulation
Open Source Commitment
This role involves significant public development work. You'll be:
Contributing to Datum's public networking repositories with transparent development
Engaging with the community through GitHub issues, RFCs, and technical discussions
Speaking at networking conferences and writing technical blog posts
Collaborating with external contributors, cloud providers, and other partners
Maintaining high standards for code quality, performance, and documentation
What Success Looks Like
Adoption and growth for Datum in the cloud-native and AI infrastructure communities
High-performance, reliable network connectivity across diverse cloud environments
Strong developer experience as evidenced by community contributions and feedback
Technical leadership recognized within the networking and distributed infra ecosystem
Scalable network architecture supporting the next generation of AI hyperscalers
We believe in openness, clarity, and collaboration. To learn more about how Datum aims to operate, please review our public handbook.