For companies:
For professionals:
For everyone:
Responsibilities
As the Engineering Manager for the IAM team, you will lead a team of Software Engineers building the identity and access management foundation behind our digital life insurance enrollment experience.You will spend roughly 20% of your time writing production code, and that capacity is accounted for in team planning. The rest of your time goes to leading the team, shaping architecture, and partnering with Product Managers, Designers, and our enterprise partners. Our system runs on Kubernetes T, and async messaging patterns. You will share responsibility for operating those workloads.Your first major initiative is IAM Platform Scalability: building an identity foundation that lets new enterprise customers onboard without engineering intervention, while meeting enterprise security and compliance requirements.This role reports to the Director of Engineering and is open to remote candidates within the United States.Technical Leadership:Stay in the code and actively participate in system design and architecture decisionsReview pull requests regularly, with feedback that raises the bar on code qualityOwn your team's quality standards: test coverage, documentation, code review practice, and the automation and quality gates that keep defects out of productionDebug and troubleshoot alongside your engineers, and lead the team through hard diagnostic workIdentify technical debt, build a remediation plan for it, and advocate for the time to do itIAM Initiative Ownership:Lead the evolution of our authorization model to support multi-tenant enterprise customers at scaleArchitect the separation of authentication and authorization so each can scale, cache, and enforce policy independently across enterprise partnershipsDesign a token strategy that balances security, partner flexibility, and platform cost, and manage the vendor relationships that go with itBuild automated user provisioning and de-provisioning so partner onboarding does not require engineering workSolve for partner-specific requirements such as biometric re-authentication, extended session lifetimes, layered access policies, and regulatory audit needsOperational Health and On-Call:The IAM team shares a weekly on-call rotation covering authentication and authorization services, and this role takes a regular turn in it alongside the engineers on the team. We treat rotation health as a first class part of the job: right sized alerting, current runbooks, and following through on the operational fixes that keep the load predictable.You will own the observability, monitoring, and alerting for your services, track uptime and incident metrics, and lead incident response when it is your team's service.Building and Developing the Team:Recruit, interview, and hire engineers for your team, and partner closely with Talent Acquisition on pipeline and calibrationOwn the onboarding experience for new engineers, including current documentation and thoughtful 30, 60, and 90 day plansHold regular 1:1s focused on growth, and build individual development plans tied to what each engineer actually wants from their careerCoach engineers on both technical and professional skills, and find them stretch assignments that move them forwardBuild an inclusive team where people trust each other enough to disagree productively, and address team conflict directly when it comes upPerformance and Delivery:Set clear, measurable expectations, give documented and actionable feedback, and run fair performance reviews with unambiguous outcomesAddress underperformance with both empathy and urgency, and raise it early rather than lateTranslate product requirements into technical plans, estimate your team's capacity and timelines honestly, and deliver against those estimatesOwn a realistic team roadmap and make the daily prioritization calls that keep it realTrack your team's delivery metrics, report on them come with a plan when something dipsVision and Stakeholder Partnership:Set a technical north star for IAM that your team can make decisions against, and execute toward it incrementally rather than in one big betTranslate company strategy into team-level work through RFCs, PRD input, and well-scoped ticketsCommunicate status, progress, and risk to stakeholders early and transparently, and escalate with a proposed solution attachedExplanuding senior leadership and external partnersConnect your team's work to business outcomes and make cost and benefit trade-offs explicitAI Adoption and Innovation:Model effective use of AI coding tools and set the standard for how agent generated changes get reviewed, tested, and attributedLevel up your team's AI practice through hands-on workshops, shared prompting patterns, and continuous iteration on the team's approachEnsure the team follows security and quality best practices for AI tool usageCreate room for experimentation and calculated risk, and treat failed experiments as learning the team talks about openlyWHO YOU AREAn Engineering Manager at Bestow is a highly technical leader who works at the intersection of people and technology. In this role you will be both a hands-on contributor and a people leader, and you find real satisfaction in both halves of that job.Core Requirements:8+ years of professional software experience, including 1+ years directly managing a team of Software Engineers while staying hands-on in the codeBachelor's degree or equivalent experienceProfessional experience with Go, or another statically typed backend language with a clear path to GoProduction experience with cloud infrastructure and Kubernetes or a comparable container orchestration platformExperience with PostgreSQL or another relational database, comfortable writing ANSI SQLExperience designing modern distributed systems and APIs, including Docker for local development and tools such as Protocol Buffers, OpenAPI, or SwaggerLead with an end-to-end ownership mentality, combining high organizational standards with excellent communication to build, retain, and empower high-performing engineering teams.IAM and Authentication Experience (Highly Desired, Not Required):Identity provider depth: hands-on experience with Auth0, Okta, or a similar platform, including tenant and organization configuration, connection management, and custom logic such as Rules or ActionsOAuth 2.0 and OIDC: working knowledge of OAuth flows, OpenID Connect, token types, JWT validation, and token lifecycle concerns like caching, rotation, and revocationMulti-tenant architecture: designing authentication systems with tenant isolation, partner-specific branding, SSO configuration, and audit logging that holds up in a regulated industryAuthorization patterns: RBAC, ABAC, or policy-based access control, and experience separating authentication from authorizationEnterprise SSO and provisioning: integrating SAML 2.0 and OIDC connections for B2B partnerships, and SCIM for automated provisioningHow You Work:Deep understanding of the full software development lifecycle, from feature inception through system maintenance, continuous integration, and release strategyHands-on experience using agentic coding tools on a production codebase. Claude Code is the standard at Bestow and direct experience with it is preferred; comparable experience with tools like Cursor or GitHub Copilot transfers wellTrack key metrics and consistently meet established Service Level AgreementsBreak down ambiguous technical problems and identify areas of risk earlyAble to pick up and ship work in the team's codebases when the team needs itTOTAL REWARDSAt Bestow, we’re proud to be awarded for our team members, innovative products, and culture. Our standard benefits include:Competitive salary and equity based on rolePolicies and managers that support work/life balance, like our flexible paid time off and parental leave programs100% paid-premium option for medical, dental, and vision insuranceLifestyle stipend to support your physical, emotional, and financial wellbeingFlexible work-from-home policy and open to well as a beautiful, state-of-the-art office in Dallas’ Deep Ellum, for those who prefer an office settingEmployee-led diversity, equity, and inclusion initiatives
Closes in:
0
days
0
hours
0
min
0
sec
tune NOT FOR YOU? IMPROVE YOUR RESULTS