Principal Software Engineer - User Platform

Canva Canva · Enterprise · Sydney, NSW, Australia · Information Technology

Principal Software Engineer on the User Platform team at Canva, focusing on Identity & Access Management (IAM) at scale. The role involves leading technical direction for complex programs like Centralised Permissions & AuthZ, Profile Decomposition, and Authentication Platform. Responsibilities include architecting scalable systems, migrating access checks to a declarative authorization platform (SpiceDB/Zanzibar-style), making high-stakes technical trade-offs, and mentoring senior engineers. The role emphasizes influence and adoption across large engineering organizations, with a focus on security, reliability, and developer experience to support Canva's growth to a billion users.

What you'd actually do

  1. You'll own the technical direction for User Platform's most complex cross-cutting programmes — Centralised Permissions & AuthZ, Profile Decomposition, and Authentication Platform — setting the architectural strategy and driving delivery across teams.
  2. You'll serve as the platform's principal-level authority across Identity & Access Management, providing credible technical leadership to Security, API Platform, Admin Experience, and product engineering simultaneously.
  3. You'll architect and oversee the migration of 3,000+ access checks into a structurally-enforced authorisation platform (SpiceDB/Zanzibar-style), designing the adoption patterns and microsyncs infrastructure that makes this tractable at Canva's scale.
  4. You'll make high-stakes technical trade-offs for critical infrastructure — including profile service decomposition and authentication pluggability — balancing reliability, velocity, and security for systems serving hundreds of millions of users.
  5. You'll mentor and technically enable the broader User Platform engineering team, raising the bar on system design, technical communication, and IAM best practices across a team of strong senior and staff engineers.

Skills

Required

  • Identity & Access Management at scale
  • Zanzibar-style authorisation systems (e.g. SpiceDB, Google Zanzibar, OPA)
  • Zero-trust identity architectures
  • Large-scale authentication platforms
  • Platform adoption across large engineering organisations
  • Technical communication
  • Stakeholder alignment
  • Change management at scale
  • System architecture
  • Technical leadership
  • High-stakes trade-offs for critical, high-availability infrastructure
  • Decomposing and evolving monolithic services
  • Mentoring senior engineers
  • Executive communication

Nice to have

  • video technology
  • scalable, high-performance rendering systems
  • AI-powered video features
  • browser-based video creation
  • Profile Decomposition
  • Authentication Platform
  • Security
  • API Platform
  • Admin Experience
  • product engineering
  • microsyncs infrastructure
  • authentication pluggability
  • developer experience

What the JD emphasized

  • Deep expertise in Identity & Access Management at scale
  • experience designing and operating Zanzibar-style authorisation systems
  • Proven track record of driving platform adoption across large engineering organisations (300+ engineering teams)
  • Strong system architecture and technical leadership skills
  • Experience decomposing and evolving monolithic services in production
  • Demonstrated ability to mentor and elevate senior engineers