软件工程师 - IAM（Java）
Software Engineer - IAM (Java)
我们是一个致力于塑造可观测性未来的技术创新者和先驱者团队。在New Relic，我们构建了一个智能平台，使企业能够在以人工智能为核心的世界中蓬勃发展，为他们提供对复杂系统的无与伦比的洞察力。随着我们全球影响力的不断扩大，我们正在寻找充满热情的人才加入我们的使命。如果你准备好帮助世界顶级公司优化他们的数字应用，欢迎你探索在这里的职业发展！
**你的机会**
New Relic整个平台都基于一个假设：当请求到达任何服务时，有人已经回答了两个问题，谁是这个用户，以及他们被允许做什么。访问与治理平台团队负责构建和运行回答这两个问题的系统。在认证方面，这意味着登录、会话和令牌管理，以及企业SSO集成（SAML、OIDC、OAuth2），供需要将New Relic接入自己身份提供商的客户使用。在授权方面，这意味着每个其他团队在允许用户接触任何内容之前都会检查的角色、功能和授权模型。
由于这些服务位于其他所有系统之下，这里的问题很少是简单的CRUD操作。你需要在平台上每个账户和组织的规模上建模访问权限，确保在流量高峰和身份提供商故障期间登录功能正常运行，并为其他工程团队构建他们用于为其自身服务采用细粒度授权的自助工具。你还需要负责这些系统的值班工作，因为当它们出现问题时，New Relic的其他部分也会受到影响。
**你会做什么**
- 每天使用AI编码助手进行实现、调试和代码审查，作为团队发布代码的常规流程。
- 构建和运营认证服务，包括SSO（SAML、OIDC）、OAuth2/OIDC令牌发放、会话和令牌生命周期、基于SCIM的用户预配，以及直接登录和企业SSO客户的机器人/欺诈防护。
- 构建API和内部工具，让其他工程团队和内部利益相关者能够管理和排查用户数据和访问控制。
- 与产品管理、产品设计和你的工程团队紧密合作，解决复杂的使用场景。
- 参与团队的值班/英雄轮班：处理生产事件，调查其他团队和客户报告的访问、认证和授权问题，并解决问题。
查看英文原文
We are a global team of innovators and pioneers dedicated to shaping the future of observability. At New Relic, we build an intelligent platform that empowers companies to thrive in an AI-first world by giving them unparalleled insight into their complex systems. As we continue to expand our global footprint, we're looking for passionate people to join our mission. If you're ready to help the world's best companies optimize their digital applications, we invite you to explore a career with us!
**Your opportunity**
New Relic's whole platform runs on an assumption: by the time a request reaches any service, someone has already answered two questions, who is this, and what are they allowed to do. The Access & Governance Platform team builds and runs the systems that answer both. On the authentication side, that means login, session and token management, and enterprise SSO integrations (SAML, OIDC, OAuth2) for customers who need to plug New Relic into their own identity provider. On the authorization side, it means the roles, capabilities, and grants model that every other team at New Relic checks against before letting a user touch anything.
Because these services sit underneath everything else, the problems here are rarely simple CRUD. You're modeling access at the scale of every account and organization on the platform, keeping login working through traffic spikes and identity-provider outages, and building the self-service tooling other engineering teams use to adopt fine-grained authorization for their own services. You'll also carry on-call for these systems, because when they have a bad day, so does the rest of New Relic.
**What you'll do**
- Use AI coding assistants daily, for implementation, debugging, and code review, as a normal part of how the team ships code.
- Build and operate authentication services, including SSO (SAML, OIDC), OAuth2/OIDC token issuance, session and token lifecycle, SCIM-based user provisioning, and bot/fraud defense, for both direct login and enterprise SSO customers.
- Build APIs and internal tooling that let other engineering teams and internal stakeholders manage and troubleshoot user data and access controls.
- Collaborate closely with product management, product design, and your engineering team to solve complex use cases.
- Participate in the team's on-call/hero rotation: triage production incidents, investigate access, authentication, and authorization issues reported by other teams and customers, and turn resolutions into runbooks.
- Investigate and fix reliability, data-integrity, and security issues in production systems, including routine dependency and container vulnerability remediation.
**This role requires**
- 1+ years of experience building and shipping reliable software services.
- Expertise in backend languages; our services span Ruby, Java, and others, with Ruby or Java preferred.
- Experience working with data models and managing data at scale, including comfort writing and reasoning about SQL against relational databases.
- Strong collaboration and communication skills, especially explaining technical tradeoffs to non-technical stakeholders.
- Comfort working alongside AI coding assistants for day-to-day development, this team uses them as a core part of the workflow.
**Bonus points if you have**
- Experience with Identity and Access Management protocols (SCIM, OAuth2, SAML, or OIDC).
- Experience with GraphQL APIs.
- Experience with observability tools and platforms.
- Experience working in the public cloud (AWS, Azure, and/or GCP).
- Experience with container technologies such as Kubernetes and Docker.
Please note that visa sponsorship is not available for this position.
#LI-GK1 #LI- _Remote_
The pay range below represents a reasonable estimate of the salary for the listed position. This role is eligible for a corporate bonus plan. Pay within this range varies by work location and may also depend on job-related factors such as an applicant’s skills, qualifications, and experience.
New Relic provides a variety of benefits for this role, including healthcare, dental, vision, parental leave and planning, and mental health benefits, a 401(k) plan and match, flex time-off, 11 paid holidays, volunteer time-off, and other competitive benefits designed to improve the lives of our employees.
Estimated Base Pay Range
$114,000—$142,000 USD
Fostering a diverse, welcoming and inclusive environment is important to us. We work hard to make everyone feel comfortable bringing their best, most authentic selves to work every day. We celebrate our talented Relics’ different backgrounds and abilities, and recognize the different paths they took to reach us – including nontraditional ones. Their experiences and perspectives inspire us to make our products and company the best they can be. We’re looking for people who feel connected to our mission and values, not just candidates who check off all the boxes.
If you require a reasonable accommodation to complete any part of the application or recruiting process, please reach out to [resume@newrelic.com](mailto:resume@newrelic.com).
We believe in empowering all Relics to achieve professional and business success through a flexible workforce model. This model allows us to work in a variety of workplaces that best support our success, including fully office-based, fully remote, or hybrid.
**Our hiring process**
In compliance with applicable law, all persons hired will be required to verify identity and eligibility to work and to complete employment eligibility verification. Note: Our stewardship of the data of thousands of customers means that a criminal background check is required to join New Relic.
We will consider qualified applicants with arrest and conviction records based on individual circumstances and in accordance with applicable law including, but not limited to, the [San Francisco Fair Chance Ordinance](https://sfgov.org/olse/sites/default/files/FCO%20poster2020.pdf).
Headhunters and recruitment agencies may not submit resumes/CVs through this website or directly to managers. New Relic does not accept unsolicited headhunter and agency resumes, and will not pay fees to any third-party agency or company that does not have a signed agreement with New Relic.
New Relic develops and distributes encryption software and technology that complies with U.S. export controls and licensing requirements. Certain New Relic roles require candidates to pass an export compliance assessment as a condition of employment in any global location. If relevant, we will provide more information later in the application process.
Candidates are evaluated based on qualifications, regardless of race, religion, ethnicity, national origin, sex, sexual orientation, gender expression or identity, age, disability, neurodiversity, veteran or marital status, political viewpoint, or other legally protected characteristics.
Review our Applicant Privacy Notice at [https://newrelic.com/termsandconditions/applicant-privacy-policy](https://newrelic.com/termsandconditions/applicant-privacy-policy)