Design, build and own Canva's authorization and access control systems, incl. SpiceDB.
Help teams adopt authorization capabilities with patterns, tooling, and integrations at Canva scale.
Make trade-offs for high-availability infra serving hundreds of millions of users.
Partner with Security, API Platform, Admin Experience and product teams to align requirements.
Help shape identity and access model, request context, and AI workflow authorization.
Mentor engineers on system design and IAM best practices.

🎯 Requirements

IAM at scale: design/operate RBAC/ReBAC/ABAC or SpiceDB in production.
Backend engineering: build/run high-performance, HA services; Java a plus.
Strong system design: turn ambiguity into clear, sequenced work.
Drive adoption of platform capabilities with clear technical communication.
Strong written and verbal communication; collaborative across teams.
Experience with policy languages / authorization engines (OPA, Cedar).

Apply on employer's website

This employer gathers applications via their own applicant tracking system.

You will be redirected to an external application form.

Share job

Meet JobCopilot: Your Personal AI Job Hunter

Automatically Apply to Engineering Jobs. Just set your preferences and Job Copilot will do the rest — finding, filtering, and applying while you focus on what matters.

Activate JobCopilot