Staff Fullstack Engineer, User Auth Experience
Stripe•4h ago
CanadaOnsiteFull-timeStaff Level12+ yrs exp
Top focus
Full Stack EngineerStaff EngineerDeveloper Experience
- Who we are
- About Stripe
- Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue
- accelerate new business opportunities. Our mission is to increase the GDP of the internet
- we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone’s reach while doing the most important work of your career.
- About the team
- The User Auth Experience (UAX) team makes authentication and account security at Stripe world-class—secure by default, frictionless for legitimate users
- resilient against evolving threats. We own the end-to-end login, registration
- session management experience for the Stripe Dashboard
- we're expanding that security foundation to every surface where users and agents interact with Stripe.
- We improve security, access
- usability simultaneously—without compromising any of the three. Our scope spans account takeover prevention, API key security, auth for AI agents
- a two-party approvals framework governing both human and automated actions.
- The team sits within OAP (Organizations and Auth Platform) in the DEeP (Developer Experience and Product Platform Engineering) organization at Stripe.
- What you’ll do
- As a Staff Engineer on UAX, you'll set technical direction across multiple areas of the team's charter, drive architecture decisions that affect millions of users
- lead initiatives that span multiple organizations. You'll operate at the intersection of security and product—designing systems where the safe path is the default path
- navigating the tension between stronger security and lower user friction.
- You'll own the technical vision for one or more of our platform bets—extending our risk-scoring framework from login to API-layer anomaly detection, evolving our step-up challenge platform to serve multiple Stripe surfaces
- defining Stripe auth primitives for the agentic era (agent principals, approval rules, MCP human-in-the-loop). These are multi-year arcs that require someone who can hold the long-term architecture while shipping incrementally.
- You'll also directly build risk-dynamic enforcement pipelines, full-stack approval flows, API key protection UX
- the analytics infrastructure that measures our impact. This is a hands-on role with architectural leverage—you'll write code, review designs
- shape how partner teams integrate with our security primitives
- Responsibilities
- Own the technical architecture for a major area of the team's charter
- Design and ship systems that serve multiple Stripe surfaces—building generalized primitives, not point solutions
- Drive cross-org technical alignment on shared security infrastructure
- Make effective tradeoffs that consider security posture, user friction, and sustainable technical foundations
- Mentor and grow engineers on the team
- Raise the bar for design rigor, operational excellence, and code quality
- Shape the team's multi-year roadmap through technical foresight and principled prioritization
- Who you are
- We’re looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement.
- Minimum requirements
- 12+ years of experience in full-time software development roles
- Experience as a technical lead by guiding your team, influencing its roadmap, and overseeing complex projects spanning multiple teams
- Experience in both frontend and backend, with strong ability to work as a generalist across the stack
- Thrive in a collaborative environment with other teams to identify high-impact ways of solving problems
- Excellent oral and written communication
- Preferred qualifications
- You strive for simple solutions and designs over complex ones, and have a good intuition for what will last and scale well
- Deep expertise in authentication and authorization systems—SSO, MFA, passkeys and WebAuthn, OAuth, session management, or API key security
- Experience building risk-based or adaptive security systems (anomaly detection, step-up auth, fraud prevention)
- Strong understanding of IAM concepts, including RBAC, identity governance, SCIM, delegated auth, or approval workflows
- Experience defining auth or security primitives for programmatic consumers (APIs, agents, and SDKs)—not just human-facing UI
- Experience building scalable, resilient, and observable systems while understanding UX best practices for the frontend
- You put yourself in the shoes of your users to understand their needs and fit that into the bigger picture
- You stitch together many different services and processes, even if you haven't worked with them before
- Experience building software for fellow developers
Required skills
software developmentfrontendbackendauthenticationauthorizationSSOMFApasskeysWebAuthnOAuthsession managementAPI key securityanomaly detectionfraud preventionIAM