Staff Engineer

This is a fully remote position, open to applicants in United States, +1 more country.

📋 Description

• Create, develop, and enhance the authorization platform utilizing RBAC/ABAC/ReBAC methodologies.

• Create, develop, and enhance the authentication platform across various use cases, including collaboration with the Auth0 integration.

• Create, develop, and enhance the user management platform focused on the creation, provisioning, and administration of user identities and entitlements.

• Collaborate with security teams to ensure that platforms are inherently secure and comply with SOC2 and GDPR standards.

• Design and implement highly scalable systems to accommodate an increasing number of users and customers.

• Establish the long-term strategy for authentication, authorization, and user management.

• Develop self-service systems along with GraphQL, gRPC, and REST APIs for product engineering teams.

• Lead projects independently from North America while coordinating with the team based in Helsinki.

• Advocate for testing, observability, and reliability best practices.

⛳️ Requirements

• A truly senior, self-reliant engineer.

• Extensive experience in building and managing identity, authentication, or authorization platforms at scale.

• Ideally, experience in a platform or product-platform engineering context.

• Proficiency with Java 2X, Spring Boot 3.X.X, WebFlux, and Maven.

• Familiarity with SQL, GraphQL, gRPC, and REST.

• Experience with AWS, GCP, Kubernetes, and Helm.

• Understanding of RBAC/ABAC/ReBAC; OAuth 2.0, OIDC, JWT, SAML 2.0, enterprise SSO federation, and SCIM.

• Experience with event-driven architecture patterns.

• TDD experience or a genuine enthusiasm for automated testing.

• A sincere interest in security.

• Comfortable collaborating with security teams on secure-by-design systems.

• Able to work effectively in a distributed, cross-timezone environment from North America alongside a Helsinki-based team.

• Nice to have: Familiarity with Auth0, SpiceDB/Zanzibar-style authorization systems, Apollo Federation, OpenTelemetry, and environments compliant with SOC2/GDPR.

🏝️ Benefits

• Equity may be offered.

• Comprehensive benefits program.

• Reasonable accommodations for qualified employees with protected disabilities, as mandated by applicable laws.

• Commitment to equal-opportunity employment.