Назад
Company hidden
7 дней назад

Sr Software Engineer, Applications (Auth)

119 051 - 165 000$
Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Sr Software Engineer, Applications (Auth) (OAuth 2.0/OpenFGA/Auth0): Building and operating identity and fine-grained authorization systems for a multi-tenant advertising platform with an accent on authentication flows, ReBAC policy modeling, and AI-agent permissions. Focus on designing secure token and authorization flows, scaling permission evaluation across complex organizational hierarchies, and driving cross-team technical direction.

Location: Remote in the United States; flexible work options are also available across the U.S. and Canada, while this role is listed for the United States.

Salary: $119,051–$165,000 per year, with potential bonuses, equity, and benefits.

Company

hirify.global Technologies develops an all-in-one platform that automates digital media operations for agencies and brands, including planning, reporting, and financial reconciliation.

What you will do

  • Extend the identity layer in Auth0, including authentication flows, token issuance, and identity federation.
  • Build and maintain the ReBAC authorization model in OpenFGA, including tuple-based policies and permission evaluation.
  • Own OAuth 2.0 and OIDC implementation details such as token flows, JWKS validation, scopes, and audience restrictions.
  • Define authentication and scoped permissions for AI agents operating alongside human users.
  • Lead technical projects across multiple teams and systems from design through production.
  • Set technical direction, review shipped work, and mentor engineers through design discussions and code reviews.

Requirements

  • At least 5 years of professional software engineering experience.
  • Deep hands-on knowledge of OAuth 2.0 and OpenID.
  • Experience with ReBAC systems such as OpenFGA, Zanzibar, or SpiceDB, including schema modeling, tuple-based policies, testing, and performance reasoning.
  • Experience with Auth0 or a comparable identity provider such as Okta, Azure AD, or Keycloak.
  • Strong backend skills in Java, Ruby, or Python, with Spring Boot, Rails, or Django.
  • Regular use of AI coding tools and the ability to review, validate, and take ownership of generated code.

Nice to have

  • Experience scaling authorization systems for complex organizational hierarchies, agencies, or multi-tenant SaaS platforms.
  • Familiarity with policy-as-code or attribute-based access control.
  • Background in ad tech or programmatic advertising.
  • Contributions to open-source identity or authorization projects.

Culture & Benefits

  • Remote, hybrid, and onsite work options are available, with this role listed as remote in the United States.
  • Flexible work week and flexible work options.
  • 401(k)/RRSP matching, mental health support, paid sabbaticals, and generous parental leave.
  • Inclusive workplace with a focus on employee growth, well-being, and work-life balance.
  • Identity, education, and employment history verification is part of the hiring process; some roles may include onsite or in-person interviews.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →