Staff Software Engineer - IAM (Platform Engineering)

About the role

We are seeking a Staff Software Engineer – IAM to architect, design, and build Identity and Access Management (IAM) services for our multi‑tenant SaaS platform. This is a software engineering role—not an IT, security administration, or enterprise IAM configuration role. Candidates must have experience designing and building identity services and writing production code. You will act as a hands‑on software engineer and technical leader, owning the architecture, implementation, and evolution of authentication, authorization, and identity services. You will partner closely with Product Engineering, Security Architecture, DevOps, and Compliance to deliver secure, scalable, developer‑friendly identity capabilities. This is a greenfield/early-stage role with significant influence over long‑term identity strategy and technical direction.

This role is remote, however, the candidate(s) will be expected to relocate at their own expense to our onsite Houston location by Q1 in 2027*. Q1 2027 is an approximate timeframe and is subject to change at any time.

Hanwha Q CELLS Technologies, Inc. a subsidiary of Hanwha Q CELLS, one of the world´s largest and most recognized photovoltaic manufacturers for its high-performance, high-quality solar cells and modules. It is headquartered in Seoul, South Korea (Global Executive HQ) Talheim, Germany (Technology & Innovation HQ) and Santa Clara, CA, USA (HW and SW Product Development HQ). Through its growing global business network spanning Europe, North America, Asia, South America, Africa, and the Middle East, the company provides excellent services and long-term partnerships to its customers in the utility, commercial, government, and residential markets. Hanwha Q CELLS is a flagship company of Hanwha Group, a FORTUNE Global 500 firm and a Top 7 business enterprise in South Korea.

Responsibilities

• Architect, design, and implement IAM platform services enabling authentication and authorization across the SaaS product
• Define and own IAM architecture: identity boundaries, trust models, access patterns, token lifecycles
• Build scalable services supporting OAuth 2.0, OIDC, SAML, and SCIM
• Develop APIs, SDKs, and tooling for safe, intuitive consumption by product teams
• Apply least‑privilege and Zero Trust principles across users, services, and infrastructure
• Lead technical decision‑making with clear tradeoffs across security, usability, and performance