Principal Software Engineer
About the job
- A bachelor's degree in Computer Science or equivalent demonstrable technical depth.
- Production-grade expertise in OAuth 2.x, OpenID Connect, SCIM, and SAML, including identifying subtle misimplementations, guiding protocol-correct designs, and explaining nuanced tradeoffs.
- At least 12 years of professional software engineering experience, including at least 5 years focused on identity, authentication, or security, with meaningful experience at the principal, staff, or architect level.
- A proven track record of shipping code alongside architectural responsibilities.
- Experience with enterprise-grade, highly available, high-performance distributed systems.
- Experience designing or supporting software deployed across self-hosted, on-premise, or dedicated cloud environments, including understanding backward compatibility, upgrade paths, and performance tuning across customer-managed infrastructure.
- Demonstrated ability to engage directly with enterprise customers and prospects on technical design and architecture.
- Experience reviewing and approving technical designs in a formal or informal architecture review capacity.
- Familiarity with emerging identity protocols and standards, including FIDO2/passkeys, DPoP, token binding, and OAuth 2.x drafts.
- Willingness to adopt and use AI-assisted development tools such as Claude Code or GitHub Copilot in everyday workflow.
- Work from the Denver metro area is strongly preferred; local employees work hybrid. Candidates elsewhere must be willing to travel to Denver approximately once per quarter.
- Applicants must be authorized to work for any employer in the United States; the company cannot sponsor or assume sponsorship of an employment visa.
- Write, review, and own high-quality, secure production code on the FusionAuth core application as a hands-on technical leader.
- Provide leadership for the platform’s architectural evolution and draft and review Technical Design Documents, ensuring designs meet standards for scalability, security, and quality before implementation.
- Serve as a go-to expert on OAuth 2.x, OpenID Connect, SCIM, and SAML; guide protocol-correct implementation and answer complex protocol questions from engineering, Support, Solutions Engineering, and customers.
- Engage directly with enterprise prospects and customers on architectural and integration design decisions, and explain complex CIAM concepts to technical and semi-technical audiences.
- Track identity-industry developments, including passkeys/FIDO2, device authorization, DPoP, token binding, emerging OAuth and OpenID Connect drafts, and AI and identity developments such as agent authentication, scoped credential issuance, and authorization for AI-driven workflows.
- Monitor broader technology trends and provide recommendations on what FusionAuth should build, adopt, or avoid; partner with Product Management to translate insights into roadmap decisions.
- Represent FusionAuth at industry conferences, working groups, and community events, building the company’s technical credibility in the identity and security ecosystem.
- Account for diverse deployment targets in architectural and feature decisions, ensuring backward compatibility, API versioning integrity, upgrade paths, and sound schema migration strategy across customer-managed environments.
- Mentor engineers through code reviews, design discussions, architectural sessions, and informal knowledge sharing to raise CIAM knowledge across the team.
- Work with Product Management, Solutions Engineering, and Customer Success on complex customer situations, roadmap decisions, and new feature design.
- Direct experience building or working within a CIAM product or identity platform.
- A history of contributing to open-source identity or security projects, or publishing technical writing on identity topics.
- Experience leading or supporting an engineering team’s transition to AI-native development workflows.
- Familiarity with compliance frameworks such as SOC 2, FedRAMP, and GDPR and their architectural impacts on data residency, encryption, and audit logging.
- Experience with PostgreSQL or MySQL at scale, including schema evolution strategy, query performance tuning, and data migration planning for a self-hosted product.
- Strong Java skills.
- Strong communication, with the ability to hold technical opinions while remaining open to other perspectives.
About the company
FusionAuth provides a scalable identity and user management platform for developers. Its main product is a self-hosted identity management system that handles authentication and user data and can be installed on any computer and integrated with any framework. It deploys via Docker Compose or ZIP packages and is managed through an API and admin interface to support sign-in, password resets, and multi-factor authentication. The platform stands out by prioritizing developer-friendly deployment flexibility, licensing and support options, and an active global community, with the goal of removing barriers to secure authentication so developers can focus on building their applications.
Company Size
51-200
Company Stage
Growth Equity (Non-Venture Capital)
Total Funding
$65M
Headquarters
Westminster, Colorado
Founded
2009
Get referred to FusionAuth
See people who can refer or advise you
Simplify's Take
What believers are saying
- Bookings doubled quarter-over-quarter ending April 30, 2026.
- July 21, 2026 Jamey Miller strengthens engineering for enterprise reliability and AI.
- July 14, 2026 Intelligent MFA lowers friction while increasing security controls.
What critics are saying
- G2 named Auth0, Frontegg, Okta, and Microsoft Entra ID top alternatives in August 2026.
- Self-hosted and hybrid customers demand support across cloud, on-prem, and API-heavy deployments.
- Bundled identity from Microsoft and Okta can compress FusionAuth pricing within twelve months.
What makes FusionAuth unique
- July 2026 Intelligent MFA runs deterministically across cloud, on-prem, and hybrid deployments.
- FusionAuth FGA by Permify adds Zanzibar-style fine-grained authorization after the Permify acquisition.
- The September 2026 MCP docs server accelerates developer workflows through natural-language API access.
Help us improve and share your feedback! Did you find this helpful?
Benefits
Health Insurance
Dental Insurance
Vision Insurance
Health Savings Account/Flexible Spending Account
401(k) Retirement Plan
401(k) Company Match
Paid Vacation
Paid Holidays
Life Insurance
Disability Insurance
Wellness Program
Gym Membership
Remote Work Options
Hybrid Work Options
Growth & Insights and Company News
6 month growth
0%1 year growth
0%2 year growth
3%FusionAuth has established its first UK sales team following 72% growth in European annual recurring revenue over two years. The Colorado-based customer identity and access management platform grew new-business ARR by 48% year-over-year in its fiscal first quarter ended 31 July 2026, with new customer acquisitions up 40%. Europe now contributes over 30% of company ARR, driven by enterprise demand for data sovereignty and tenant isolation. According to Gartner, European sovereign-cloud infrastructure spending is forecast to rise 83% in 2026. FusionAuth's platform allows organisations to deploy authentication services in their own environments or on-premises. The company is co-sponsoring The Fan Identity Forum at Leaders Week London on 7-8 October, partnering with Stadion to address fan identity management for sports organisations.
FusionAuth appoints Jamey Miller as senior vice president of engineering and technology. July 21, 2026 Jamey Miller FusionAuth has appointed Jamey Miller as senior vice president of engineering and technology, adding an experienced software and product development executive as the customer identity and access management (CIAM) provider scales its engineering organization to support enterprise growth and increasing demand for identity infrastructure. In the newly created leadership role, Miller will oversee engineering and technology strategy, with responsibility for expanding the company's research and development organization, maintaining platform reliability, strengthening product quality, and preparing FusionAuth's engineering operations to support artificial intelligence-driven identity workloads. The appointment comes as enterprises invest in modern identity platforms to secure users, applications, AI agents, and connected services while balancing cloud, hybrid, and on-premises deployment requirements. "Identity has become mission-critical infrastructure, and AI is raising the stakes even higher - every new agent, every new surface, every new enterprise customer is a harder identity problem than the one before," said Brian Bell, chief executive officer of FusionAuth. "We're scaling to meet that demand, and that starts with the engineering organization. Jamey has done this before: built and scaled R&D through high-growth, high-complexity environments. That's exactly what we need right now." Miller brings more than 25 years of experience leading global software research and development organizations spanning engineering, product management, cybersecurity, information technology, and customer support. His background includes building engineering teams in high-growth software companies, managing operational transformation initiatives, and integrating acquisitions in private equity-backed environments. Most recently, Miller served as chief product and technology officer at enterprise software company Confience, where he led product and technology operations, improved software delivery processes, strengthened platform security, and managed the integration of Brazilian software company LabSoft following its acquisition. Earlier in his career, Miller served as executive vice president of research and development and operations at Convercent, helping guide the governance, risk, and compliance software company through its acquisition by OneTrust. Following the transaction, he became vice president of R&D operations at OneTrust, where he supported the expansion and operational management of a 400-person research and development organization. "Identity is becoming more challenging as AI applications, autonomous agents, and the rising security expectations of enterprise customers continue to reshape what authentication and authorization need to accomplish," Miller said. "FusionAuth is perfectly built for this environment and I look forward to successfully leading the company's engineering team into its next chapter." FusionAuth develops customer identity and access management software that enables organizations to manage authentication, authorization, and user identity across consumer-facing applications. Its platform supports passwordless authentication, multifactor authentication, single sign-on, OAuth, and other identity standards, while offering deployment options that include cloud, on-premises, and hybrid environments. The company said Miller's appointment supports its continued expansion as organizations increasingly prioritize identity infrastructure capable of supporting enterprise security, regulatory compliance, and the growing authentication demands created by AI-enabled applications and digital services.
FusionAuth has appointed Jamey Miller as SVP of Engineering and Technology. Miller will scale engineering to support the company's growth and increasing enterprise adoption whilst maintaining product quality and platform reliability. Miller brings over 25 years of experience scaling global SaaS R&D organisations across product, engineering, security, IT and support. He has worked in both cloud and self-hosted deployment models, with expertise in PE-backed and high-growth environments. Most recently, Miller served as Chief Product & Technology Officer at Confience, where he improved delivery predictability and platform security. He previously held positions at Convercent and OneTrust, where he drove scale and cost efficiencies across a 400-person R&D organisation. FusionAuth provides customer identity and access management platforms with support for passwordless authentication, MFA, SSO and OAuth.
FusionAuth has launched Intelligent MFA, a risk-based authentication engine that evaluates logins against 10 configurable signals and challenges users only when risk is detected. The feature is included in FusionAuth 1.68 release. Unlike typical multi-factor authentication offerings that use opaque risk scoring, FusionAuth's system is deterministic and rules-based. It can run in customer-hosted environments, dedicated cloud deployments, on-premises infrastructure, and hybrid architectures. The system evaluates login risk using signals including unrecognised device, untrusted device, blocklisted IP address, dormant account, recent password change, and impossible travel. Each login receives a low, medium, or high risk score, with high-risk sessions triggering an MFA challenge. FusionAuth reported bookings doubled quarter over quarter in the period ending 30 April 2026, reflecting growing demand for identity infrastructure that gives organisations greater control over deployment and data.
How to get support for FusionAuth FGA by Permify. Learn how to get community and enterprise support for FusionAuth FGA by Permify, the fine-grained authorization engine now part of the FusionAuth platform. Published: March 13, 2026 FusionAuth FGA by Permify is an open-source authorization service, now part of FusionAuth. Following FusionAuth's acquisition of Permify, the product is now called FusionAuth FGA by Permify - combining Permify's relationship-based, Google Zanzibar-inspired authorization engine with FusionAuth's deploy-anywhere identity platform. It handles fine-grained access control (FGA), deciding what authenticated users are allowed to do within your application, with support for RBAC, ABAC, and ReBAC at scale. If you use FusionAuth FGA by Permify (or you're considering it), you'll eventually need help. This guide covers two ways to get support: through the free community Discord or through a paid Enterprise plan with FusionAuth. Community support. The Permify Discord server is the main free community channel where you can ask questions and get help from maintainers and other users. To join: * Go to discord.gg/permify. * Create a Discord account if you don't already have one, or log in. * Click Accept Invite to join the server. When you first join, the server asks a couple of onboarding questions about how you're using FusionAuth FGA by Permify and what features you're interested in. You can answer these or skip them. Once you're in, head to the #permify-help-forum channel to ask questions. (The older #permify-help channel is being deprecated in favor of the forum channel.) There are also channels for #general discussion, #schema help, and #feedback. Both community members and Permify maintainers respond to questions here, and many questions receive a response within a couple of hours. However, more complex questions may take longer, and there are no guarantees. Strengths of community support. * Free to use, with no account or license required beyond Discord. * Active community with responsive maintainers. Most questions receive answers within hours. * Good for getting started, exploring FusionAuth FGA by Permify's features, and troubleshooting common issues. Limitations of community support. * No guaranteed response times. Maintainers provide best-effort support, and complex questions may take longer to get a reply. * Not covered by any SLA. If your production system goes down at 2 AM, nobody is obligated to respond. * Answers come from the community as well as maintainers, so quality may vary. Paid enterprise support. If you're running FusionAuth FGA by Permify in production and need guaranteed support, FusionAuth offers Permify support as part of its Enterprise plan. This is separate from the community channels and gives you direct access to FusionAuth's engineering team - including the Permify experts who built the original open-source project and joined FusionAuth with the acquisition. When you get an Enterprise support license, you can choose how to deploy FusionAuth FGA by Permify: * FusionAuth Cloud: Run a fully managed, highly available FusionAuth FGA by Permify instance in FusionAuth Cloud, with no infrastructure to manage. * Self-Hosted: Deploy FusionAuth FGA by Permify in your own infrastructure, keeping full control over your data and environment. What you get. * 24/7 support via email and phone. * A private Slack channel with FusionAuth's team. * Support tickets through the FusionAuth account portal, with response time SLAs. * Solution architect guidance for your implementation. How to get it. Paid support is included in the FusionAuth Enterprise plan. To get started: * Visit the FusionAuth pricing page to review the Enterprise plan details. * Contact FusionAuth's sales team to discuss your requirements. A sales representative and sales engineer can answer specific questions about your use case and hosting preferences. * Once you have an Enterprise license, log in to your FusionAuth account portal. Click the support button in the lower-right corner to open and track support tickets. Strengths of paid support. * SLA-backed response times, so you know when to expect a reply. * Direct access to FusionAuth's engineering team, rather than relying on community volunteers. * 24/7 availability, including phone support for urgent production-impacting issues. * A private Slack channel for ongoing communication with your support team. * The Enterprise license supports advanced features of FusionAuth; if you are in the market for a CIAM solution, you can use that as well. * Flexible deployment using either FusionAuth-managed cloud hosting or your own infrastructure. Limitations of paid support. * Requires a FusionAuth Enterprise license; contact sales for pricing based on your requirements. * Best-suited to teams running or planning to run FusionAuth FGA by Permify in production. If you're adding authorization to a side project, the cost may not be justified yet. Head over to Discord for your questions. Which option is right for you? For people getting started with FusionAuth FGA by Permify, the community Discord server is the right place to begin. It's active, free, and covers common questions. If you're running FusionAuth FGA by Permify in production, where downtime has real consequences, the Enterprise plan gives you the SLA and direct engineering access that community support cannot. Contact FusionAuth to discuss whether the Enterprise plan fits your needs. Get the best of FusionAuth. Once a month. Directly to your inbox. More on fine-grained authorization. Ten years ago, FusionAuth designed and built its applications around logic-driven requirements. A user clicks a button and goes to a different screen. Nowadays, when... FusionAuth's new beta SDK streamlines mobile development for iOS and Android, offering powerful backend capabilities and seamless integration with your... After releasing the Android SDK Beta FusionAuth's new Swift SDK for iOS Beta is streamlines mobile development for iOS, offering equally powerful backend... If you've been working with FusionAuth for a while, especially customizing themes or email messages, you might have wondered: "Is there an easier way to handle... Get updates on techniques, technical guides, and the latest product innovations coming from FusionAuth. Just dev stuff. No junk.