Senior Enterprise Engineer

Duolingo; York and North Yorkshire; On-site; GBP 104,000 - 156,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

Mental health benefits

Fertility benefits

Parental and adoption leave

401(k) with generous match

Annual international retreat

Lunch prepared daily by in-house chefs

Job summary

Duolingo’s Enterprise Engineering team builds and operates the internal platforms, identity systems, and automation that power how Duos work every day. You will design and ship high‑impact projects across identity and access, SaaS integrations, and governance, partnering with Security and Legal to reduce toil through automation.

Based in New York City or Pittsburgh, you’ll own foundational services, automate lifecycle workflows, and help land durable, auditable playbooks across core systems with

Qualifications

• Strong background in identity and access management concepts (SSO/SAML/OIDC, SCIM provisioning, RBAC/ABAC) across enterprise systems.
• Hands‑on experience with infrastructure‑as‑code and CI/CD (Terraform and modern pipelines) to manage identity, SaaS, or internal platform configuration.
• Proven ability to ship multi‑stakeholder engineering projects improving reliability, efficiency, or employee experience at scale.
• Experience implementing SaaS governance and license optimization with Finance/Procurement and Security partners.
• Joiner/mover/leaver automation at scale with data pipelines and policy guardrails.

Responsibilities

• Define and measure SLOs for internal services; create dashboards, alerts, and runbooks; participate in incident response and on‑call for enterprise platforms.
• Deliver cross‑functional initiatives end‑to‑end: write specs, align stakeholders, de‑risk launches, land durable outcomes with documentation.
• Build and evolve infrastructure‑as‑code patterns; contribute modules/templates and raise engineering standards across Enterprise.
• Automate employee lifecycle workflows (onboarding, transfers, offboarding) and RBAC/SCIM provisioning across core systems (Okta, Google Workspace, Slack, Atlassian).
• Partner with Security, Finance, Legal, and Procurement to implement SaaS governance and license optimization programs.
• Own incident leadership for enterprise systems and drive lasting post‑incident improvements.

Skills

Identity & access management

Infrastructure as code

CI/CD pipelines

Automation & internal tooling

SLOs / dashboards / runbooks

Automation of joiner/mover/leaver

SaaS governance & license optimization

Incident leadership

RBAC/ABAC

Tools

Terraform

Okta

Google Workspace

Slack

Atlassian

Job description

• Duolingo’s Enterprise Engineering team builds and operates the internal platforms, identity systems, and automation that power how Duos work every day. We apply modern engineering practices—infra as code, CI/CD, and internal tools—to deliver secure, reliable, and scalable employee experiences
• As a Senior Enterprise Engineer, you will design and ship high‑impact projects across identity and access, SaaS integrations and governance, device/endpoint platforms, and employee lifecycle automation. You’ll partner closely with Security, Finance, Legal, and Platform to reduce toil through automation, improve reliability, and turn policy into maintainable workflows and code. This role is based in New York City or Pittsburgh
• Design and implement foundational enterprise services (e.g., identity and access management, SaaS integrations, MDM/endpoint, internal tooling) with reliability, security, and scalability in mind
• Build and evolve infrastructure‑as‑code, CI/CD, and configuration‑as‑code patterns; contribute modules/templates and participate in reviews to raise the engineering bar across Enterprise Engineering
• Automate employee lifecycle workflows (onboarding, transfers, offboarding), RBAC/SCIM provisioning, and policy enforcement across core systems like Okta, Google Workspace, Slack, and Atlassian
• Define and measure SLOs for internal services; create dashboards, alerts, and runbooks; participate in incident response and on‑call for enterprise platforms
• Partner with Security, Finance, Legal, and Procurement to implement SaaS governance, license optimization, and risk controls—codifying processes into auditable, testable workflows
• Deliver cross‑functional initiatives end‑to‑end: author clear specs, align stakeholders, de‑risk launches, and land durable outcomes with strong documentation

Benefits

• Medical, dental, and vision for employees as well as eligible partners and dependents
• Mental health benefits such as therapy sessions and coaching to support you to be your best self
• Fertility benefits to support your family planning journey
• Fully paid parental and adoption leave
• Fully paid subscription to Care.com and paid backup days for dependents and your fur family
• 401(k) with generous match and immediate vesting
• 20 days of paid time off, with two additional weeks off for winter break
• First-time home buyer bonus (in Pittsburgh)
• Competitive salaries and equity
• Yearly stipend for professional development
• Transportation reimbursement for however you get to work
• Lunch prepared daily by our in-house chefs
• Annual international retreat for all full-time employees
• Monthly events celebrating our team and their amazing work
• On-site gym and massages
• Game room for taking brain breaks

We believe exceptional candidates come from all backgrounds.

• Strong background in identity and access management concepts and integrations (SSO/SAML/OIDC, SCIM provisioning, RBAC/ABAC) across enterprise systems
• Hands‑on experience with infrastructure‑as‑code and CI/CD (e.g., Terraform and modern pipelines) to manage identity, SaaS, or internal platform configuration
• The ability to work from or relocate to New York City or Pittsburgh
• Clear, concise communication and documentation skills; you collaborate effectively with Security, Finance, Legal, and Platform partners
• Proficiency building automations and internal tooling that integrate with APIs for systems like Okta, Google Workspace, Slack, and Atlassian
• Operational excellence: you define SLOs, build dashboards/alerts/runbooks, and contribute to on‑call/incident response for internal platforms
• Proven impact shipping multi‑stakeholder engineering projects that improve reliability, efficiency, or employee experience at scale
• Experience implementing SaaS governance and license optimization programs with Finance/Procurement and Security partners
• A track record building reliable joiner/mover/leaver automation at scale, including data pipelines and policy guardrails
• Experience defining and landing engineering standards for internal platforms (module libraries, templates, checkers, documentation patterns) adopted org‑wide
• Prior ownership of MDM/endpoint platforms and fleet‑level automation for security/compliance baselines
• Incident leadership experience for enterprise systems and the ability to drive lasting post‑incident improvements