Senior Enterprise Platform & IAM Engineer

Duolingo; York and North Yorkshire; On-site; GBP 104,000 - 156,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

Mental health benefits

Fertility benefits

Parental and adoption leave

401(k) with generous match

Annual international retreat

Lunch prepared daily by in-house chefs

Job summary

Duolingo’s Enterprise Engineering team builds and operates the internal platforms, identity systems, and automation that power how Duos work every day. You will design and ship high‑impact projects across identity and access, SaaS integrations, and governance, partnering with Security and Legal to reduce toil through automation.

Based in New York City or Pittsburgh, you’ll own foundational services, automate lifecycle workflows, and help land durable, auditable playbooks across core systems with

Qualifications

• Strong background in identity and access management concepts (SSO/SAML/OIDC, SCIM provisioning, RBAC/ABAC) across enterprise systems.
• Hands‑on experience with infrastructure‑as‑code and CI/CD (Terraform and modern pipelines) to manage identity, SaaS, or internal platform configuration.
• Proven ability to ship multi‑stakeholder engineering projects improving reliability, efficiency, or employee experience at scale.
• Experience implementing SaaS governance and license optimization with Finance/Procurement and Security partners.
• Joiner/mover/leaver automation at scale with data pipelines and policy guardrails.

Responsibilities

• Define and measure SLOs for internal services; create dashboards, alerts, and runbooks; participate in incident response and on‑call for enterprise platforms.
• Deliver cross‑functional initiatives end‑to‑end: write specs, align stakeholders, de‑risk launches, land durable outcomes with documentation.
• Build and evolve infrastructure‑as‑code patterns; contribute modules/templates and raise engineering standards across Enterprise.
• Automate employee lifecycle workflows (onboarding, transfers, offboarding) and RBAC/SCIM provisioning across core systems (Okta, Google Workspace, Slack, Atlassian).
• Partner with Security, Finance, Legal, and Procurement to implement SaaS governance and license optimization programs.
• Own incident leadership for enterprise systems and drive lasting post‑incident improvements.

Skills

Identity & access management

Infrastructure as code

CI/CD pipelines

Automation & internal tooling

SLOs / dashboards / runbooks

Automation of joiner/mover/leaver

SaaS governance & license optimization

Incident leadership

RBAC/ABAC

Tools

Terraform

Okta

Google Workspace

Slack

Atlassian

Job description

Duolingo’s Enterprise Engineering team builds and operates the internal platforms, identity systems, and automation that power how Duos work every day. You will design and ship high‑impact projects across identity and access, SaaS integrations, and governance, partnering with Security and Legal to reduce toil through automation.

Based in New York City or Pittsburgh, you’ll own foundational services, automate lifecycle workflows, and help land durable, auditable playbooks across core systems with