Senior Enterprise Engineer

Duolingo; Northern (KY); Híbrido; USD 162 000 - 220 000; Tempo integral

Resumo da oferta

Duolingo is seeking a Senior Enterprise Engineer to design and ship high‑impact projects across identity and access, SaaS integrations, and governance. You will partner with Security, Finance, Legal, and Platform teams to reduce toil through automation and policy‑driven workflows.

This role is based in New York City or Pittsburgh and welcomes candidates from diverse backgrounds. You will build reliable, scalable internal platforms, implement RBAC/ABAC, SCIM provisioning, and MDM/endpoint

Qualificações

• Proven track record shipping multi‑stakeholder engineering projects at scale.
• Hands‑on experience with infrastructure‑as‑code and CI/CD to manage identity and internal platforms.
• Strong knowledge of identity and access management concepts (SSO/SAML/OIDC, SCIM provisioning, RBAC/ABAC).

Responsabilidades

• Design and build foundational enterprise services (identity, SaaS integrations, MDM/endpoint) with reliability and security.
• Develop and evolve infrastructure‑as‑code, CI/CD, and configuration‑as‑code patterns.
• Automate employee lifecycle workflows (onboarding, transfers, offboarding) and policy enforcement.
• Define and monitor SLOs; create dashboards, alerts, and runbooks; participate in incident response for internal platforms.
• Collaborate with Security, Finance, Legal, and Procurement to implement SaaS governance and risk controls.

Conhecimentos

Identity & access

SaaS integrations

RBAC/ABAC

SCIM provisioning

Okta

Google Workspace

Slack

Atlassian

CI/CD

MDM/endpoint

Incident response

Ferramentas

Terraform

SAML/OIDC

Descrição da oferta de emprego

Our mission at Duolingo is to develop the best education in the world and make it universally available. It’s a big mission, and that’s where you come in!

At Duolingo, you’ll join a team that cares about finding innovative solutions to complex technical problems , running countless experiments (300+ at a time!) with our massive user base to make data-driven decisions, and educating our users and employees alike. You’ll have limitless learning opportunities, mentorship and collaboration with world-class minds, and a variety of projects with large scopes — while doing work that’s both fun and meaningful.

Join our life-changing mission to develop education for our half a billion (and growing!) learners around the world.

About the role...

Duolingo’s Enterprise Engineering team builds and operates the internal platforms, identity systems, and automation that power how Duos work every day. We apply modern engineering practices—infra as code, CI/CD, and internal tools—to deliver secure, reliable, and scalable employee experiences. As a Senior Enterprise Engineer, you will design and ship high‑impact projects across identity and access, SaaS integrations and governance, device/endpoint platforms, and employee lifecycle automation. You’ll partner closely with Security, Finance, Legal, and Platform to reduce toil through automation, improve reliability, and turn policy into maintainable workflows and code. This role is based in New York City or Pittsburgh. We believe exceptional candidates come from all backgrounds. If you meet only some of the qualifications below, we encourage you to apply!

• Design and implement foundational enterprise services (e.g., identity and access management, SaaS integrations, MDM/endpoint, internal tooling) with reliability, security, and scalability in mind.
• Build and evolve infrastructure‑as‑code, CI/CD, and configuration‑as‑code patterns; contribute modules/templates and participate in reviews to raise the engineering bar across Enterprise Engineering.
• Automate employee lifecycle workflows (onboarding, transfers, offboarding), RBAC/SCIM provisioning, and policy enforcement across core systems like Okta, Google Workspace, Slack, and Atlassian.
• Define and measure SLOs for internal services; create dashboards, alerts, and runbooks; participate in incident response and on‑call for enterprise platforms.
• Partner with Security, Finance, Legal, and Procurement to implement SaaS governance, license optimization, and risk controls—codifying processes into auditable, testable workflows.
• Deliver cross‑functional initiatives end‑to‑end: author clear specs, align stakeholders, de‑risk launches, and land durable outcomes with strong documentation.

You have...

• Proven impact shipping multi‑stakeholder engineering projects that improve reliability, efficiency, or employee experience at scale.
• Hands‑on experience with infrastructure‑as‑code and CI/CD (e.g., Terraform and modern pipelines) to manage identity, SaaS, or internal platform configuration.
• Strong background in identity and access management concepts and integrations (SSO/SAML/OIDC, SCIM provisioning, RBAC/ABAC) across enterprise systems.
• Proficiency building automations and internal tooling that integrate with APIs for systems like Okta, Google Workspace, Slack, and Atlassian.
• Operational excellence: you define SLOs, build dashboards/alerts/runbooks, and contribute to on‑call/incident response for internal platforms.
• Clear, concise communication and documentation skills; you collaborate effectively with Security, Finance, Legal, and Platform partners.
• The ability to work from or relocate to New York City or Pittsburgh.

Exceptional candidates will have...

• Experience implementing SaaS governance and license optimization programs with Finance/Procurement and Security partners.
• A track record building reliable joiner/mover/leaver automation at scale, including data pipelines and policy guardrails.
• Experience defining and landing engineering standards for internal platforms (module libraries, templates, checkers, documentation patterns) adopted org‑wide.
• Prior ownership of MDM/endpoint platforms and fleet‑level automation for security/compliance baselines.
• Incident leadership experience for enterprise systems and the ability to drive lasting post‑incident improvements.

Benefits

Take a peek at how we care for our employees' holistic well-being with our benefits here.

Job Alerts

Sign up for job alerts here.

Accommodations

We will do everything we can within reason to make sure that your interview takes place in an environment that fairly and accurately assesses your skills. If you need assistance or accommodation, please contact [e-mail].

Equal Employment Opportunity

Duolingo is proud to be an Equal Employment Opportunity employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.

Fraud Warning

Unfortunately, there is a rise in scammers pretending to be real Duolingo employees. Duolingo and our employees will never ask for your Social Security number, bank details, or passport info, and we’ll never ask you to deposit a check, purchase equipment, or exchange money during the interview process. Real Duolingo employees always use an email that ends in @duolingo.com or @recruiting.duolingo.com. Stay alert and double-check these details before sharing any information.

By applying for this position your data will be processed as per the Duolingo Applicant Privacy Notice.

The offered salary is dependent upon several factors, including work experience, skills, and internal peer comparisons. The posted range is subject to change in the future. For this role, base salary is supplemented by equity compensation. We encourage you to talk with your recruiter for more information related to compensation for this role!

Salary Range

$162,400 — $219,700 USD

AI in Hiring

Duolingo uses AI technology to assist in our hiring process. We want to be transparent about how we use this technology and your rights. We use Greenhouse Software's Talent Matching feature to assist with reviewing applications for the skills and experience we have decided are important for this role.

How it works

• Talent Matching reviews your resume and responses to application questions to determine the extent to which your qualifications match the job requirements selected for this role. These requirements and their desired weighting are established by our recruiters in collaboration with hiring managers.
• All Talent Matching output is reviewed by our recruiting and hiring teams, who make the final decision on each application. Talent Matching does not automatically disposition any candidate or make hiring decisions.

Voluntary Self Identification

To fulfill our mission of developing the best education in the world and making it universally available, we seek exceptional talent for every role. We recruit candidates from diverse backgrounds. To help us evaluate our hiring process for equitability, we invite U.S. applicants to share their demographic information. Participation in this survey is voluntary and confidential. Participation will not affect any hiring decisions or outcomes.

How would you describe your gender identity? (mark all that apply) Select...

How would you describe your racial/ethnic background? (mark all that apply) Select...

How would you describe your sexual orientation? (mark all that apply) Select...

Do you identify as transgender? Select...

Do you have a disability or chronic condition (physical, visual, auditory, cognitive, mental, emotional, other) that substantially limits one or more of your major life activities, including mobility, communication (seeing, hearing, speaking), & learning Select...

Are you a veteran or active member of the United States Armed Forces? Select...