Remote Principal IAM Architect — Golang & Fintech

Sezzle; Mexico; Hybrid; PHP 4,120,615 - 7,554,461; Full time

Job summary

Sezzle is seeking a Principal Software Engineer to own and lead the evolution of authentication and authorization at Sezzle. This fully remote role centers on building a scalable API gateway and identity services, collaborating across Product, Security, and Support teams.

With 12+ years in backend software and deep expertise in OAuth2, OIDC, and JWT, you will guide migrations and enforce secure-by-default patterns across the system.

Qualifications

• Bachelor’s degree in Computer Science or a similar technical field is required.
• 12+ years of professional software engineering experience, including backend focus.
• Deep expertise in authentication and authorization systems (OAuth2, OpenID Connect, SAML, JWT).
• Experience designing or operating an API gateway or auth proxy at scale.
• Proven leadership in guiding technical direction and scaling engineering teams.

Responsibilities

• Own the technical vision and roadmap for Sezzle’s authentication and authorization platform, including a dedicated API auth gateway and identity services.
• Architect, design, and build scalable, highly-available auth services and gateway components primarily in Golang, leveraging AWS, RDS, and modern distributed patterns.
• Lead phased, zero-downtime migrations of auth traffic with rollback/safety mechanisms.
• Establish authentication/authorization standards (OAuth2/OIDC, token lifecycles, RBAC/ABAC).
• Drive reliability and scalability across a distributed microservices architecture.

Skills

Golang

RESTful APIs

Distributed systems

OAuth2/OpenID Connect

Security best practices

AI-assisted tooling

Mentoring

Education

Bachelor’s degree in Computer Science or similar

Tools

AWS

RDS (MySQL/PostgreSQL)

API gateway (Kong/Envoy/AWS API Gateway)

SQL-based RDBMS tuning

Job description

Sezzle is seeking a Principal Software Engineer to own and lead the evolution of authentication and authorization at Sezzle. This fully remote role centers on building a scalable API gateway and identity services, collaborating across Product, Security, and Support teams.

With 12+ years in backend software and deep expertise in OAuth2, OIDC, and JWT, you will guide migrations and enforce secure-by-default patterns across the system.