Senior Enterprise Engineer — Identity & Automation Leader

Duolingo; Pittsburgh (Allegheny County); On-site; USD 162,000 - 220,000; Full time

Job summary

Duolingo’s Enterprise Engineering team builds and operates internal platforms and identity systems. As Senior Enterprise Engineer, you will design and ship high‑impact projects across identity and access, SaaS governance, device platforms, and lifecycle automation, partnering with Security, Finance, Legal and Platform teams.

You will implement IAM, RBAC/ABAC, SCIM provisioning, and automation across Okta, Google Workspace, Slack, and Atlassian, while driving reliability and compliance at scale.

Qualifications

• Proven track record delivering enterprise-scale projects with reliability and security.
• Strong experience with IAM concepts, SSO/SAML/OIDC and SCIM provisioning.
• Hands-on with IaC and CI/CD to manage identity and internal platforms.
• Ability to collaborate with Security, Finance, Legal, and Platform teams.
• Experience building automation and integrating with APIs (Okta, Google Workspace, Slack, Atlassian).

Responsibilities

• Design and ship enterprise services (identity/access, SaaS integrations, MDM/endpoint) securely and scalably.
• Evolve infrastructure‑as‑code and configuration‑as‑code patterns; contribute modules and reviews.
• Automate employee lifecycle workflows and RBAC/SCIM provisioning across core systems.
• Define and measure SLOs; create dashboards, alerts, and runbooks; participate in on‑call.
• Partner with Security, Finance, Legal, and Procurement to implement SaaS governance and risk controls.
• Deliver end-to-end cross-functional initiatives with clear specs and durable documentation.

Skills

Infrastructure as Code

CI/CD

Identity & Access Management

SaaS Integrations

RBAC/ABAC

SCIM provisioning

Okta integration

Docs & communication

Tools

Terraform

CI/CD pipelines

Job description

Duolingo’s Enterprise Engineering team builds and operates internal platforms and identity systems. As Senior Enterprise Engineer, you will design and ship high‑impact projects across identity and access, SaaS governance, device platforms, and lifecycle automation, partnering with Security, Finance, Legal and Platform teams.

You will implement IAM, RBAC/ABAC, SCIM provisioning, and automation across Okta, Google Workspace, Slack, and Atlassian, while driving reliability and compliance at scale.