Lead Engineer II – Senior Engineer, Authentication and Authorization IRC302231

GlobalLogic; India; On-site; INR 2,500,000 - 4,500,000; Full time

Benefits offered by this job

Competitive salaries

Family medical insurance

Group Term Life Insurance

Group Personal Accident Insurance

NPS (National Pension Scheme)

Periodic health awareness program

Extended maternity leave

Annual performance bonuses

Referral bonuses

Sports events

Cultural activities

Food on subsidies rates

Corporate parties

Dedicated GL Zones

Job summary

GlobalLogic seeks a Lead Engineer II – Senior Engineer focused on Authentication and Authorization in India. You will own the identity stack, implement token issuance and validation, and drive secure multi-tenant access across services.

You’ll design policy-based access controls, collaborate with product and platform teams, and harden the auth layer with rotation, auditing, and threat modeling to protect enterprise identities.

Qualifications

• 5+ years building auth systems in production SaaS environments.
• Strong Go or Python (ideally both); comfortable writing performant, well-tested service code.
• Deep knowledge of OAuth 2.0, OIDC, JWT, and SAML — not just using libraries but understanding what’s happening underneath.
• Experience with authorization policy engines (OPA, Casbin, or equivalent) and modeling complex permission structures.
• Familiarity with multi-tenant isolation patterns and the security implications of getting them wrong.
• Comfort in an AWS/EKS environment with secrets management (AWS Secrets Manager, Vault).
• Nice to have: SCIM provisioning, FIDO2/WebAuthn, zero-trust networking, SOC 2 audit experience, or prior work on a shared platform team serving internal consumers.

Responsibilities

• Design and operate the centralized authn/authz platform: token issuance and validation (OIDC/JWT), OAuth 2.0 flows, API key management, and service-to-service identity.
• Build and maintain the authorization model: RBAC and ABAC policies, tenant isolation enforcement, and fine-grained permission evaluation (Open Policy Agent or similar).
• Expose auth as a shared internal service consumed by the rest of the control plane — clean APIs, well-documented contracts, and minimal coupling.
• Partner with product and platform teams to implement SSO integrations (SAML, SCIM) and onboard enterprise identity providers.
• Harden the auth layer: token rotation, secret management, audit logging, and threat modeling against common identity attacks.
• Drive adoption of consistent auth patterns across services, replacing one-off implementations.

Skills

Auth systems

Go/Python

OAuth 2.0/OIDC/JWT/SAML

Policy engines (OPA/Casbin)

Multi-tenant security

AWS/EKS secrets management

Domain: shared platform / SCIM / Web 2

Tools

AWS

EKS

Python

SAML

Job description

Lead Engineer II – Senior Engineer, Authentication and Authorization IRC302231

Function

Software Product Engineering

Experience

5-10 years

Location

India - Bangalore, Hyderabad, Pune

Skills

AWS, AWS Secrets Manager, JWT, OAuth 2.0, OpenID Connect (OIDC), Prompt Engineering AWS: EKS, Python, SAML

We’re building the identity and access layer that every service in our SaaS control plane depends on. You’ll own the common auth stack — making sure the right principals get the right access, consistently, across every tenant and product surface.

Requirements

You should have

• – 5+ years building auth systems in production SaaS environments.
• – Strong Go or Python (ideally both); comfortable writing performant, well-tested service code in either.
• – Deep knowledge of OAuth 2.0, OIDC, JWT, and SAML — not just using libraries but understanding what’s happening underneath.
• – Experience with authorization policy engines (OPA, Casbin, or equivalent) and modeling complex permission structures.
• – Familiarity with multi-tenant isolation patterns and the security implications of getting them wrong.
• – Comfort in an AWS/EKS environment with secrets management (AWS Secrets Manager, Vault).
• Nice to have: SCIM provisioning, FIDO2/WebAuthn, zero-trust networking, SOC 2 audit experience, or prior work on a shared platform team serving internal consumers.

Job responsibilities

• – Design and operate the centralized authn/authz platform: token issuance and validation (OIDC/JWT), OAuth 2.0 flows, API key management, and service-to-service identity.
• – Build and maintain the authorization model: RBAC and ABAC policies, tenant isolation enforcement, and fine-grained permission evaluation (Open Policy Agent or similar).
• – Expose auth as a shared internal service consumed by the rest of the control plane — clean APIs, well-documented contracts, and minimal coupling.
• – Partner with product and platform teams to implement SSO integrations (SAML, SCIM) and onboard enterprise identity providers.
• – Harden the auth layer: token rotation, secret management, audit logging, and threat modeling against common identity attacks.
• – Drive adoption of consistent auth patterns across services, replacing one-off implementations.

What we offer

Exciting Projects: We focus on industries like High-Tech, communication, media, healthcare, retail and telecom. Our customer list is full of fantastic global brands and leaders who love what we build for them.

Collaborative Environment: You Can expand your skills by collaborating with a diverse team of highly talented people in an open, laidback environment — or even abroad in one of our global centers or client facilities!

Work-Life Balance: GlobalLogic prioritizes work-life balance, which is why we offer flexible work schedules, opportunities to work from home, and paid time off and holidays.

Professional Development: Our dedicated Learning & Development team regularly organizes Communication skills training(GL Vantage, Toast Master),Stress Management program, professional certifications, and technical and soft skill trainings.

Excellent Benefits:

• competitive salaries
• family medical insurance
• Group Term Life Insurance
• Group Personal Accident Insurance
• NPS(National Pension Scheme )
• Periodic health awareness program
• extended maternity leave
• annual performance bonuses
• referral bonuses

Fun Perks:

• sports events
• cultural activities
• offer food on subsidies rates
• Corporate parties
• dedicated GL Zones
• rooftop decks and GL Club where you can drink coffee or tea with your colleagues over a game of table and offer discounts for popular stores and restaurants!

About GlobalLogic

GlobalLogic, a Hitachi Group Company, is a trusted digital engineering partner to the world’s largest and most forward-thinking companies. Since 2000, we’ve been at the forefront of the digital revolution – helping create some of the most innovative and widely used digital products and experiences. Today we continue to collaborate with clients in transforming businesses and redefining industries through intelligent products, platforms, and services.