About Kaseya
Kaseya is the leading provider of AI-powered IT management and cybersecurity software, serving Managed Service Providers (MSPs) and internal IT organizations worldwide. Our comprehensive platform helps organizations efficiently manage, secure, and automate their IT environments, driving operational efficiency and long-term business success.
Backed by Insight Partners, a leading global software investor, Kaseya has experienced sustained double-digit growth and continues to expand its global footprint. Today, Kaseya supports customers in more than 20 countries and manages over 15 million endpoints worldwide.
Founded in 2000, Kaseya has built a culture centered around innovation, accountability, and results. We are a high-growth, high-performance organization that values individuals who are driven, adaptable, and committed to delivering exceptional outcomes for our customers and teammates alike.
At Kaseya, success comes from embracing challenges, moving with urgency, and continuously raising the bar.
Position Summary:
- Kaseya is looking for a Platform Backend Engineer to build and operate the core platform services powering Fleet, connecting the execution runtime, identity layer, event routing, secret management, and audit infrastructure. This role focuses on high-reliability backend and platform engineering, where correctness, security, scalability, and operational clarity are critical.
- Build and operate the platform services that underpin Fleet: API gateway, Kafka-based event routing (PSA webhooks and RMM alerts → Temporal workflow triggers), Zitadel integration for machine identity and capability grant management, and ClickHouse-backed immutable audit ledger writes
- Implement the Secret Management and KMS abstraction layer: pluggable KEK backends (AWS KMS, Azure Key Vault, GCP Cloud KMS, BYOK), envelope encryption via AWS Encryption SDK, per-client cryptographic isolation
- Build the capability grant enforcement pipeline: per-workflow, per-client, per-operation grants issued by Zitadel and validated by the sidecar Identity and Capability Engine on every inbound request
- Own the GitOps-based automation catalog deployment pipeline: workflow definitions versioned in Git, deployed to per-client Temporal namespaces via CI/CD
- Build operational tooling for MSP onboarding: Zitadel org provisioning, compliance tier configuration per client org, and per-client KMS setup
- Contribute to the Safe Connector Layer: vendor API wrapper services (ConnectWise, NinjaOne, M365/CIPP, Datto, IT Glue, CrowdStrike, Huntress) that enforce scope, inject platform-managed credentials, and log every call before execution.
Required Qualification:
- Strong backend engineering in Go or Rust; we are moving away from Java-heavy backgrounds for new platform work
- Experience building event-driven systems: Kafka, event sourcing patterns, at-least-once delivery guarantees
- Familiarity with Temporal or another durable workflow engine
- Experience with identity and access management systems: OAuth 2.0, OIDC, token lifecycle management, fine-grained authorization models
- Solid understanding of encryption patterns: envelope encryption, key hierarchy design, KMS integrations
- Comfort operating in multi-tenant, regulated environments where correctness and audit evidence are non-negotiable
- Strong observability instincts: structured logging, distributed tracing, metrics : you instrument what you build
Preferred Qualification:
- Experience with Zitadel, Keycloak, or similar identity providers
- ClickHouse or other columnar/append-only store experience
- Prior work in MSP tooling, PSA/RMM API integrations, or compliance-adjacent infrastructure (CMMC, HIPAA, SOC 2)
Additional information
Kaseya provides equal employment opportunity to all employees and applicants without regard to race, religion, age, ancestry, gender, sex, sexual orientation, national origin, citizenship status, physical or mental disability, veteran status, marital status, or any other characteristic protected by applicable law.
Skills Required
- Strong backend engineering experience in Go or Rust
- Experience building event-driven systems using Kafka, event sourcing patterns, and at-least-once delivery guarantees
- Familiarity with Temporal or another durable workflow engine
- Experience with identity and access management systems, including OAuth 2.0, OIDC, token lifecycle management, and fine-grained authorization
- Understanding of envelope encryption, key hierarchy design, and KMS integrations
- Experience operating in multi-tenant, regulated environments with strict audit requirements
- Strong observability skills, including structured logging, distributed tracing, and metrics
- Experience with Zitadel, Keycloak, or similar identity providers
- ClickHouse or other columnar or append-only datastore experience
- Experience with MSP tooling, PSA/RMM API integrations, or CMMC, HIPAA, or SOC 2 infrastructure
Kaseya Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Kaseya and has not been reviewed or approved by Kaseya.
-
Leave & Time Off Breadth — PTO is commonly described around 20–21 days per year plus standard holidays. Some indicate they can fully disconnect while on leave.
-
Equity Value & Accessibility — Equity or option grants are available to many roles, offering potential upside beyond base pay. This exposure is presented as a meaningful component of total compensation for some roles.
-
Affordable Benefits — The high‑deductible medical plan is described as having low or employer‑covered employee‑only premiums in some cases. This can reduce out‑of‑pocket costs for those who select the HDHP.
Kaseya Insights
What We Do
Kaseya is a premier provider of unified IT management and security software for managed service providers (MSPs) and small to medium-sized businesses (SMBS). Through its customer-centric approach, Kaseya delivers best-in-breed technologies that allow organizations to efficiently manage, secure and backup IT. Kaseya offers a broad array of IT management solutions, including well-known names: Kaseya, IT Glue, RapidFire Tools, Spanning Cloud Apps, ID Agent, Graphus, RocketCyber, TruMethods and Unitrends. These solutions empower businesses to command all of IT centrally, easily manage remote and distributed environments, simplify backup and disaster recovery, safeguard against cybersecurity attacks, effectively manage compliance and network assets, streamline IT documentation and automate across IT management functions. Headquartered in Miami, Florida, Kaseya is privately held with a presence in over 20 countries.
Gallery
