Senior Enterprise Engineer — Identity & Automation Lead

Duolingo; New York (NY); On-site; USD 162,000 - 220,000; Full time

Benefits offered by this job

Equity compensation

Job summary

Duolingo is seeking a Senior Enterprise Engineer to design and ship high-impact identity, access, and automation platforms. You’ll work across Okta, Google Workspace, Slack, and Atlassian to reduce toil, improve reliability, and scale employee experiences.

Role based in New York City or Pittsburgh with strong cross-functional collaboration. Ideal candidates will have hands-on IaC/CI‑CD experience, expertise in IAM (SSO/SAML/OIDC, SCIM provisioning, RBAC/ABAC), and a track record delivering

Qualifications

• Proven impact shipping multi-stakeholder engineering projects.
• Hands-on IaC and CI/CD to manage identity, SaaS, or internal platforms.
• Strong background in identity and access management across enterprise systems.
• Proficiency building automations that integrate with APIs for core tools.
• Operational excellence: SLOs, dashboards, and incident response.
• Clear communication and documentation with cross-functional partners.

Responsibilities

• Design and implement foundational enterprise services for identity and access.
• Build and evolve infrastructure-as-code patterns and CI/CD workflows.
• Automate employee lifecycle workflows across core systems like Okta and Google Workspace.
• Define and measure SLOs; create dashboards, alerts, and runbooks; participate in on-call.
• Partner with Security, Finance, Legal, and Procurement on governance and controls.
• Deliver end-to-end initiatives with clear specs and durable documentation.

Skills

IAM

SSO/OIDC

RBAC/ABAC

SCIM provisioning

Terraform

Tools

Okta

Google Workspace

Slack

Atlassian

Job description

Duolingo is seeking a Senior Enterprise Engineer to design and ship high-impact identity, access, and automation platforms. You’ll work across Okta, Google Workspace, Slack, and Atlassian to reduce toil, improve reliability, and scale employee experiences.

Role based in New York City or Pittsburgh with strong cross-functional collaboration. Ideal candidates will have hands-on IaC/CI‑CD experience, expertise in IAM (SSO/SAML/OIDC, SCIM provisioning, RBAC/ABAC), and a track record delivering