Design, build, and evolve our authorization platform (RBAC/ABAC/ReBAC), enabling teams across the company to answer "what can this user do?"
Design, build, and evolve our authentication platform, covering authentication patterns across our range of use cases, working closely with our Auth0 integration
Design, build, and evolve our user management platform — creating, provisioning, and managing user identities and entitlements — supporting our entire customer base
Partner closely with security teams to ensure our authentication, authorization, and user management platforms are secure by design and aligned with SOC2 and GDPR requirements
Design and implement highly scalable systems that keep pace with a constantly growing number of users and customers
Help define the long-term roadmap across all three domains — authentication, authorization, and user management — not just execute against one handed to you
Build self-service systems and APIs (GraphQL, gRPC, REST) that make authentication, authorization, and user data consumable by product engineering teams across the company
Drive projects autonomously from North America while staying closely aligned with our Helsinki-based team
Champion strong testing, observability, and reliability practices across the platform

Backend: Java 2X, Spring Boot 3.X.X, WebFlux, Maven
Data & APIs: SQL, GraphQL, gRPC, REST
Cloud & Infrastructure: AWS, GCP, Kubernetes, Helm
Identity & Security Protocols: RBAC/ABAC/ReBAC; OAuth 2.0, OIDC, and JWT; SAML 2.0 and enterprise SSO federation (assertion validation, signature/encryption handling, IdP- vs. SP-initiated flows); SCIM for user provisioning and deprovisioning
Engineering Practices: Event-driven architecture patterns; TDD or a genuine passion for automated testing

Remote (Worldwide) — Canada, US

AlphaSense is hiring a Staff Software Engineer, Identity & Access Management