Staff Software Engineer

About Ironwood Digital Ironwood Digital is the leading provider of AI-powered IT management and cybersecurity software, serving Managed Service Providers (MSPs) and internal IT organizations worldwide. Our comprehensive platform helps organizations efficiently manage, secure, and automate their IT environments, driving operational efficiency and long-term business success. Backed by Insight Partners , a leading global software investor, Ironwood Digital has experienced sustained double-digit growth and continues to expand its global footprint. Today, Ironwood Digital supports customers in more than 20 countries and manages over 15 million endpoints worldwide. Founded in 2000, Ironwood Digital has built a culture centered around innovation, accountability, and results. We are a high-growth, high-performance organization that values individuals who are driven, adaptable, and committed to delivering exceptional outcomes for our customers and teammates alike. At Ironwood Digital, success comes from embracing challenges, moving with urgency, and continuously raising the bar. Why Ironwood Digital? Join a fast-growing company that’s transforming the IT industry. At Ironwood Digital, you’ll have the opportunity to work with cutting-edge technology, collaborate with a dynamic team, and develop your career in a high impact role. Join the Ironwood Digital growth rocket ship and see how we are #ChangingLives! Job Summary We’re hiring Platform Backend Engineers to build and operate the core services connecting workflow execution, identity, event routing, secrets management, and audit capabilities across Ironwood Digital’s platform. This is a hands-on backend role focused on Go or Rust, event-driven systems, multi-tenant security, and production reliability. You’ll build foundational services used by engineering teams and AI-enabled workflows, with correctness, auditability, and operational clarity as core design requirements. Roles & Responsibilities Build and operate core platform services, including API gateways, event routing, identity integrations, secrets management, and audit infrastructure Design event-driven systems that convert product events, alerts, and partner webhooks into durable workflow execution using Kafka and Temporal Implement a pluggable key-management layer supporting cloud KMS providers, bring-your-own-key models, envelope encryption, and per-client cryptographic isolation Build and enforce fine-grained capability grants for individual clients, workflows, operations, and service-to-service requests Own GitOps-based deployment pipelines for versioned workflow definitions across isolated client environments Develop onboarding automation for identity provisioning, compliance configuration, and client-specific key-management setup Build secure connector services for third-party APIs, including scoped access, platform-managed credentials, request validation, and audit logging Improve platform observability, reliability, failure recovery, security, and operational readiness while supporting production incident response Required Qualifications Experience building and operating production backend services using Go or Rust Experience designing event-driven systems using Kafka or similar technologies, including retries, idempotency, replay, and at-least-once delivery Experience implementing authentication and authorization using OAuth 2.0, OIDC, token lifecycle management, or fine-grained access controls Experience implementing encryption or key-management solutions using cloud KMS platforms, envelope encryption, or key-hierarchy designs Experience operating multi-tenant production systems using structured logging, metrics, distributed tracing, and incident-response practices Preferred Qualifications Experience with Temporal or another durable workflow orchestration platform Experience integrating identity platforms such as Zitadel, Keycloak, Auth0, Okta, or similar technologies Experience with ClickHouse or another columnar, append-only, or audit-focused data store Experience with GitOps, CI/CD, Kubernetes, or infrastructure-as-code deployment practices Experience integrating MSP, PSA, RMM, security, or Microsoft 365 platform APIs Experience building software for regulated environments subject to SOC 2, HIPAA, CMMC, or similar requirements Experience developing multi-cloud platform services across AWS, Azure, or GCP Compensation Range The base salary range for this job is CAD $180,000 – $250,000 / year. An individual’s base pay depends on various factors including geographical location and review of experience, knowledge, skills, and abilities of the applicant. At Ironwood Digital, certain roles are eligible for benefits and additional rewards. These rewards are allocated based on individual impact in role. In addition, certain roles also have the opportunity to earn sales incentives based on revenue or utilization, depending on the terms of the plan and the employee’s role. Additional Information Ironwood Digital provides equal employment opportunity to all employees and applicants without regard to race, religion, age, ancestry, gender, sex, sexual orientation, national origin, citizenship status, physical or mental disability, veteran status, marital status, or any other characteristic protected by applicable law. #IND525 Additional information Ironwood Digital provides equal employment opportunity to all employees and applicants without regard to race, religion, age, ancestry, gender, sex, sexual orientation, national origin, citizenship status, physical or mental disability, veteran status, marital status, or any other characteristic protected by applicable law.