At a glance
- Workplace
- Remote
- Location
- Remote
- Salary
- CAD 164,450-226,550 · Base salary
About the role
- This is a Staff Engineer role focused on the identity and access platform, managing user lifecycle, authentication, and authorization for a growing customer base. You will design and build scalable, secure-by-design systems while collaborating across time zones with a core team based in Helsinki. The role involves shaping the long-term roadmap and creating self-service APIs for internal product engineering teams.
Responsibilities
- Design, build, and evolve the authorization platform using RBAC, ABAC, and ReBAC models.
- Develop and maintain authentication platforms and integrations, including Auth0.
- Manage the user identity and entitlement platform for the entire customer base.
- Partner with security teams to ensure systems are secure by design and compliant with SOC2 and GDPR.
- Design highly scalable systems to support a growing number of users.
- Define the long-term roadmap for authentication, authorization, and user management domains.
- Build self-service APIs (GraphQL, gRPC, REST) for internal consumption.
- Drive projects autonomously from Canada while collaborating with the Helsinki-based team.
- Champion strong testing, observability, and reliability practices.
Requirements
- Experience building and operating identity, authentication, or authorization platforms at scale.
- Proficiency in Java 2X, Spring Boot 3.X.X, WebFlux, and Maven.
- Experience with SQL, GraphQL, gRPC, and REST APIs.
- Knowledge of cloud infrastructure including AWS, GCP, Kubernetes, and Helm.
- Expertise in identity protocols: OAuth 2.0, OIDC, JWT, SAML 2.0, and SCIM.
- Understanding of RBAC, ABAC, and ReBAC authorization models.
- Experience with event-driven architecture patterns.
- Commitment to TDD or automated testing practices.
Preferred qualifications
- Auth0 experience
- SpiceDB / Zanzibar-style authorization system experience
- Apollo Federation
- OpenTelemetry
- Experience operating within SOC2 and/or GDPR-compliant environments
Benefits
- Base compensation range of $164,450—$226,550 CAD
- Equity
- Generous benefits program
Workplace
- Role is based in Canada.
- Requires working in a distributed, cross-timezone setup.
Skills
- Java
- Spring Boot
- WebFlux
- Maven
- SQL
- GraphQL
- gRPC
- REST
- AWS
- GCP
- Kubernetes
- Helm
Show all 15 skills
- OAuth 2.0
- OIDC
- SAML 2.0
