Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
Очень мало
$119к-165к/год
$160к$220кмедиана$250к
По похожим ролям (48) ~ $220к/год
На СНГ рынке: $4.2к/мес ($3.1к - $5.4к)
66
Хорошая вакансия
развернуть
Чётко очерченная senior-роль с востребованными технологиями и хорошими льготами, но зарплата заметно ниже медианы рынка, что снижает общую привлекательность предложения.
Кликните для подробной информации
Ниже рынкаАктуальный стекЧёткая зона ответственностиХорошие льготы
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Sr Software Engineer, Applications (Auth) (OAuth 2.0/OpenFGA/Auth0): Building and operating identity and fine-grained authorization systems for a multi-tenant advertising platform with an accent on authentication flows, ReBAC policy modeling, and AI-agent permissions. Focus on designing secure token and authorization flows, scaling permission evaluation across complex organizational hierarchies, and driving cross-team technical direction.
Location: Remote in the United States; flexible work options are also available across the U.S. and Canada, while this role is listed for the United States.
Salary: $119,051–$165,000 per year, with potential bonuses, equity, and benefits.
Company
hirify.global Technologies develops an all-in-one platform that automates digital media operations for agencies and brands, including planning, reporting, and financial reconciliation.
What you will do
Extend the identity layer in Auth0, including authentication flows, token issuance, and identity federation.
Build and maintain the ReBAC authorization model in OpenFGA, including tuple-based policies and permission evaluation.
Own OAuth 2.0 and OIDC implementation details such as token flows, JWKS validation, scopes, and audience restrictions.
Define authentication and scoped permissions for AI agents operating alongside human users.
Lead technical projects across multiple teams and systems from design through production.
Set technical direction, review shipped work, and mentor engineers through design discussions and code reviews.
Requirements
At least 5 years of professional software engineering experience.
Deep hands-on knowledge of OAuth 2.0 and OpenID.
Experience with ReBAC systems such as OpenFGA, Zanzibar, or SpiceDB, including schema modeling, tuple-based policies, testing, and performance reasoning.
Experience with Auth0 or a comparable identity provider such as Okta, Azure AD, or Keycloak.
Strong backend skills in Java, Ruby, or Python, with Spring Boot, Rails, or Django.
Regular use of AI coding tools and the ability to review, validate, and take ownership of generated code.
Nice to have
Experience scaling authorization systems for complex organizational hierarchies, agencies, or multi-tenant SaaS platforms.
Familiarity with policy-as-code or attribute-based access control.
Background in ad tech or programmatic advertising.
Contributions to open-source identity or authorization projects.
Culture & Benefits
Remote, hybrid, and onsite work options are available, with this role listed as remote in the United States.
Flexible work week and flexible work options.
401(k)/RRSP matching, mental health support, paid sabbaticals, and generous parental leave.
Inclusive workplace with a focus on employee growth, well-being, and work-life balance.
Identity, education, and employment history verification is part of the hiring process; some roles may include onsite or in-person interviews.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →