Lead Engineer II – Senior Engineer

About the Role

We're building the identity and access layer for every service in our SaaS control plane. You will own the common auth stack, ensuring consistent principal access across all tenants.

Requirements

• 5+ years experience building auth systems in production SaaS environments.
• Strong Go or Python skills; comfortable writing performant, well-tested service code.
• Deep knowledge of OAuth 2.0, OIDC, JWT, and SAML (understanding underlying mechanics).
• Experience with authorization policy engines like OPA or Casbin.
• Familiarity with multi-tenant isolation patterns and AWS/EKS environments for secrets management.

Nice to Haves

• SCIM provisioning, FIDO2/WebAuthn experience.
• Zero-trust networking and SOC 2 audit background.
• Prior work on a shared platform team serving internal consumers.

What You'll Do

• Design and operate the centralized authn/authz platform: token issuance (OIDC/JWT), OAuth flows, API key management.
• Build authorization models using RBAC/ABAC policies with fine-grained permission evaluation.
• Expose clean APIs for internal consumption by the control plane.
• Partner on SSO integrations (SAML) and enterprise identity provider onboarding.
• Harden the auth layer: token rotation, secret management, audit logging, threat modeling.

We Offer

Exciting projects in high-tech, healthcare, media, retail, and telecom. We offer a collaborative environment with flexible schedules to support work-life balance. Our L&D team provides communication skills training (GL Vantage), stress management programs, technical certifications, and soft skill trainings.