Senior Backend Engineer - Identity & Access Management

<div class="content-intro"><h3>ABOUT onX</h3> <p>We’re a team of builders, adventurers, and risk takers using technology to help people confidently explore the outdoors. Driven by our mission to awaken the adventurer inside everyone, we build products that optimize every outdoor experience and inspire confidence to get out and go further.</p> <p>We’re a high-growth tech company. The pace is fast, the work takes grit, and ambiguity is part of the job. As the world changes around us, we adapt - continuously evolving how we build, prioritize, and deliver.</p> <p>Our business moves quickly, and there’s real opportunity to shape what we build next. Each of our verticals - Hunt, Offroad, Backcountry, and Fish - is at a different stage of maturity, which means the challenges you encounter and the impact you have will vary depending on where you sit and what the business needs most.</p> <p>We operate with an experimentation mindset, continually iterating and improving how we solve problems. We expect our people to use the latest tooling, including AI, thoughtfully and responsibly, pairing human judgment with technology to increase quality, speed, and impact.</p> <p>Our impact comes to life through the products we build, in the stories of our customers, and in our growing commitment to land stewardship and recreational access.</p></div><h3><strong>WHAT YOU WILL DO</strong></h3> <p>onX is seeking a Senior Backend Engineer with a passion for building scalable platform Identity and Access Management (IAM) systems. Your focus will be on designing, developing, and scaling secure authentication, authorization, and user management services that are foundational to our platform. You will play a key role in evolving our IAM platform and delivering seamless cross-platform authentication across iOS, Android, and web.</p> <p>You will be part of our Core Services team that enables product teams to build faster and more securely by providing core infrastructure, services, and patterns. This is a great opportunity to help shape the future of how users securely access and interact with onX's suite of outdoor technology products.</p> <p>This position reports to the Director of Engineering, Core Services.</p> <h3><strong>TECHNOLOGIES WE USE</strong></h3> <p>Our backend engineers primarily work in Go running in Kubernetes on Google Cloud Platform. The IAM team works extensively with identity platforms (Ory Kratos, Hydra, Oathkeeper), distributed databases (CockroachDB), and OAuth 2.0/session management patterns. Understanding mobile authentication tradeoffs (WebView vs. browser-based auth, token-based patterns) is particularly relevant for this role.</p> <h3><strong>As an onX Senior Backend Engineer, your day to day responsibilities would look like:</strong></h3> <p><span style="font-weight: 400;">(Essential Job Duties)</span></p> <ul> <li>Build scalable, secure IAM services that enable new features and products across the onX suite of apps</li> <li>Design and implement backend systems focusing on observability, fault-tolerance, security, and high performance</li> <li>Drive architectural decisions related to Identity and Access Management, ensuring alignment with and advancing our broader platform strategy</li> <li>Define and implement SLIs/SLOs for IAM services; drive reliability engineering practices including incident response and performance optimization</li> <li>Write thorough unit, integration, and acceptance tests to ensure high service quality and maintainability</li> <li>Document APIs, service architectures, and technical decisions for internal stakeholders and external partners as needed</li> <li>Collaborate closely with fellow engineers, product managers, and other stakeholders through design reviews, paired programming, and cross-functional planning sessions</li> <li>Leverage and extend existing onX services and platform patterns to drive consistency and reduce duplication</li> <li>Proactively improve system monitoring, alerting, diagnostics, and operational readiness of IAM-related services</li> <li>Participate in an on-call rotation to ensure backend services remain highly available and reliable</li> <li>Mentor and share knowledge with engineers on your team</li> <li>Lead by example and embody onX's company values, fostering a culture of technical excellence, ownership, and collaboration</li> <li>&nbsp;</li> </ul> <h3><strong>LOCATION</strong></h3> <p><span style="font-size: 10pt;">onX has created a thriving distributed workforce community across several US locations. This position can be performed from an onX corporate office, “Basecamp,” or “Connection Hub".&nbsp;<br></span></p> <ul> <li><span style="font-size: 10pt;"><strong>Corporate Offices</strong>: onX was founded in Montana with offices in Missoula and Bozeman. If you prefer to work in an office at least part of the time this is a great option.</span></li> <li><span style="font-size: 10pt;"><strong>Basecamps</strong>: Basecamps are established virtual workforce communities where a sizable number of distributed team members group for work, volunteering, socializing, and adventure. &nbsp; </span> <ul> <li><span style="font-size: 10pt;">Our current Basecamps are located within a 90-mile radius of the following: Austin, TX; Charlotte, NC; Denver, CO; Kalispell, MT; Minneapolis, MN; Portland, OR; Salt Lake City, UT; and Seattle, WA.&nbsp;</span></li> </ul> </li> <li><span style="font-size: 10pt;"><strong>Connection Hubs</strong>: Connection Hub locations are smaller, emerging communities of distributed team members.&nbsp;</span> <ul> <li><span style="font-size: 10pt;">Our current Connection Hubs are located within a 60-mile radius of the following: Boise, ID; Charleston, SC; Dallas/Fort Worth, TX; Phoenix, AZ; Richmond, VA; Spokane, WA; and Vermont.</span></li> </ul> </li> </ul> <h3><strong>WHAT YOU’LL BRING</strong></h3> <ul> <li>B.S., M.S., or equivalent experience in computer science or a related field</li> <li>Eight or more years of professional software development experience, with API development as a primary focus for at least three of those years</li> <li>Strong Go/Golang backend development experience with RESTful API design</li> <li>Experience building and debugging distributed, scalable, highly available microservices architecture</li> <li>Solid understanding of identity systems: OAuth 2.0, session management, bearer token authentication, SSO integrations</li> <li>Experience with distributed databases (CockroachDB or similar PostgreSQL-compatible distributed systems) and relational databases (PostgreSQL, MySQL)</li> <li>Excellence in designing and developing modern APIs and scalable systems that ensure reliability and extensibility</li> <li>Familiarity with Docker, Kubernetes, and infrastructure-as-code technologies such as Terraform</li> <li>Strong computer science foundation</li> <li>Security-first mindset -- you think about threat models, secure defaults, and defense in depth as part of your design process</li> <li>You evaluate technologies and solutions based on merit, stability, performance, and the ability to debug</li> <li>Ability to write maintainable, well-tested code that's easy for others to understand</li> <li>A strong sense of ownership of your work</li> <li>Advocacy for customers -- both internal colleagues and end users -- and their experience</li> <li>Permanent US work authorization is a condition of employment with onX</li> </ul> <h3><strong>Preferred Qualifications</strong></h3> <p><span style="font-weight: 400;">Though not required, we would be thrilled to consider candidates with any of the following:</span></p> <ul> <li>Experience with identity platforms such as Ory Kratos, Auth0, Cognito, or similar</li> <li>Experience with the Ory Stack, especially Hydra, Kratos, and Oathkeeper</li> <li>Experience with Authzed SpiceDB, Google Zanzibar, or AWS Cedar for fine-grained authorization</li> <li>Understanding of mobile authentication patterns: WebView vs. browser auth tradeoffs, token-based flows across iOS/Android/web</li> <li>Reliability engineering experience: SLI/SLO implementation, incident response, performance optimization</li> <li>SOC2 compliance experience or familiarity with security audit frameworks</li> <li>Experience with Elixir or the Phoenix Framework</li> <li>Familiarity with Google Cloud Platform</li> <li>Experience working with a distributed team</li> </ul> <h3><strong>COMPENSATION</strong></h3> <p><span style="font-weight: 400;">onX is committed to compensating all employees fairly and equitably for their contributions. For this position, applicants can expect to make between $146,000 to $182,000 upon hire. The pay range will vary based on experience, skills, certifications, and education among other factors as required in the job description. In addition, full-time onX employees are eligible for a grant of common share options with a vesting schedule and a potential annual bonus of 10% based on company performance.</span></p> <h3><strong>WHAT WE ARE OFFERING YOU</strong></h3> <ul> <li style="font-weight: 400;"><span style="font-weight: 400;">Competitive salaries, annual bonuses, equity, and opportunities for growth</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Comprehensive health benefits including a no-monthly-cost medical plan&nbsp;</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Parental leave plan of 5 or 13 weeks fully paid</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">401k matching at 100% for the first 3% you save and 50% from 3-5%</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Company-wide outdoor adventures and amazing outdoor industry perks</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Annual “Get Out, Get Active” funds to fuel your active lifestyle in and outside of the gym</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Flexible time away package that includes PTO, STO, VTO, quiet weeks, and floating holidays</span></li> </ul> <h3>PERFORMANCE ESSENTIALS</h3> <p>In this role, success is driven by cognitive abilities such as concentration and problem-solving, essential for our computer-centric tasks. onX will explore reasonable accommodations to ensure that individuals with diverse abilities can fully engage in and contribute to the essential physical and mental functions of the job. If you need assistance or accommodation, please contact us at <a href="mailto:PS@onxmaps.com">PS@onxmaps.com</a>.&nbsp;</p> <p>&nbsp;</p> <p><strong>Position open until filled.&nbsp;</strong></p> <p><strong>#LI-Remote</strong></p><div class="content-conclusion"><p><strong>At onX, we believe that unique perspectives make us stronger.</strong> By bringing together people with different experiences, ideas, and viewpoints, we fuel innovation and move closer to our mission of awakening the adventurer in everyone. We are proud to be an equal opportunity employer and are committed to fairness not only in hiring, but also in development, compensation, and promotion. Our goal is to build an inclusive community where every team member can show up authentically and thrive. Together, we win as one team. Come join us!</p> <hr> <p>onX Maps will <span style="text-decoration: underline;">never</span> ask for credit card or SSN details during the initial application process. For your digital safety, apply only through our legitimate website at <a class="c-link c-link--underline" href="http://onxmaps.com/" target="_blank" data-stringify-link="http://onXmaps.com" data-sk="tooltip_parent">onXmaps.com</a>&nbsp;or directly via our <a href="https://www.linkedin.com/company/onxmaps" target="_blank">LinkedIn page.</a></p> <p>onX does not sell any Personal Information, but we may transfer employment related records to our service providers or third parties that provide business services to onX or as required by law. For more information, see our <a href="https://www.onxmaps.com/privacy-policy" target="_blank">Privacy Policy</a>.</p> <p>As part of our interview process, your conversation may be recorded for documentation purposes to allow interviewers to focus fully on the discussion. Recordings are confidential and accessible only to authorized personnel. Please note, onX respects all applicable laws regarding recording consent, and you will have an opportunity to opt-out if preferred.</p></div>