Senior Platform Security Engineer: IAM & Authorization

BairesDev; Colombia; Presencial; COP 381.667.000 - 572.501.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

100% remote work

USD compensation or local currency

Descripción de la vacante

BairesDev is seeking a Senior Platform Security Engineer (IAM/Authorization) to architect and deploy scalable identity and access management solutions across the platform. You’ll build fine-grained authorization models, develop authentication middleware, and collaborate with engineering to enforce secure-by-default API patterns.

The role demands 5+ years in platform security or IAM, experience with ReBAC/RBAC, Zanzibar-inspired systems like SpiceDB or Auth0 FGA, and strong distributed-systems

Formación

• 5+ years in Platform Security, IAM, or related software roles.
• Experience with ReBAC and RBAC models.
• Hands-on with Zanzibar-inspired authorization systems such as SpiceDB or Auth0 FGA.
• Strong skills in building core platform tooling and auth middleware.
• Knowledge of distributed systems architecture and API-first design.
• Fluent English.

Responsabilidades

• Architect and deploy scalable IAM and authorization solutions.
• Build fine-grained access control models.
• Develop authentication middleware and security libraries.
• Collaborate with engineering to apply secure-by-default API patterns.
• Ensure low-latency, reliable global authorization services.

Conocimientos

IAM

RBAC

ReBAC

SpiceDB

Auth0 FGA

Middleware

Distributed systems

English

Herramientas

SpiceDB

Auth0 FGA

Descripción del empleo

BairesDev is seeking a Senior Platform Security Engineer (IAM/Authorization) to architect and deploy scalable identity and access management solutions across the platform. You’ll build fine-grained authorization models, develop authentication middleware, and collaborate with engineering to enforce secure-by-default API patterns.

The role demands 5+ years in platform security or IAM, experience with ReBAC/RBAC, Zanzibar-inspired systems like SpiceDB or Auth0 FGA, and strong distributed-systems