Senior Enterprise Platform & Identity Engineer

EngineersOfAI; Pittsburgh (Allegheny County); On-site; USD 140,000 - 200,000; Full time

Job summary

Duolingo seeks a Senior Enterprise Engineer to design and ship high‑impact identity, access, and automation projects across internal platforms. You will partner with Security, Finance, Legal, and Platform teams to reduce toil while improving reliability and governance.

Based in New York City or Pittsburgh, you’ll own onboarding/offboarding automation, RBAC/SCIM provisioning, and SaaS integrations with Okta, Google Workspace, Slack, and Atlassian, delivering measurable outcomes.

Qualifications

• Proven impact shipping multi‑stakeholder engineering projects that improve reliability, efficiency, or employee experience at scale.
• Hands‑on experience with infrastructure‑as‑code and CI/CD (e.g., Terraform and modern pipelines) to manage identity, SaaS, or internal platform configuration.
• Strong background in identity and access management concepts and integrations (SSO/SAML/OIDC, SCIM provisioning, RBAC/ABAC) across enterprise systems.
• Proficiency building automations and internal tooling that integrate with APIs for systems like Okta, Google Workspace, Slack, and Atlassian.
• Operational excellence: you define SLOs, build dashboards/alerts/runbooks, and contribute to on‑call/incident response for internal platforms.
• Clear, concise communication and documentation skills; you collaborate effectively with Security, Finance, Legal, and Platform partners.
• The ability to work from or relocate to New York City or Pittsburgh.

Responsibilities

• Design and implement foundational enterprise services (e.g., identity and access management, SaaS integrations, MDM/endpoint, internal tooling) with reliability, security, and scalability in mind.
• Build and evolve infrastructure‑as‑code, CI/CD, and configuration‑as‑code patterns; contribute modules/templates and participate in reviews to raise the engineering bar across Enterprise Engineering.
• Automate employee lifecycle workflows (onboarding, transfers, offboarding), RBAC/SCIM provisioning, and policy enforcement across core systems like Okta, Google Workspace, Slack, and Atlassian.
• Define and measure SLOs for internal services; create dashboards, alerts, and runbooks; participate in incident response and on‑call for enterprise platforms.
• Partner with Security, Finance, Legal, and Procurement to implement SaaS governance, license optimization, and risk controls—codifying processes into auditable, testable workflows.
• Deliver cross‑functional initiatives end‑to‑end: author clear specs, align stakeholders, de‑risk launches, and land durable outcomes with strong documentation.

Skills

Identity & access management

SAML/OIDC

RBAC/ABAC

SaaS integrations

Terraform

CI/CD pipelines

Tools

Okta

Google Workspace

Slack

Atlassian

Job description

Duolingo seeks a Senior Enterprise Engineer to design and ship high‑impact identity, access, and automation projects across internal platforms. You will partner with Security, Finance, Legal, and Platform teams to reduce toil while improving reliability and governance.

Based in New York City or Pittsburgh, you’ll own onboarding/offboarding automation, RBAC/SCIM provisioning, and SaaS integrations with Okta, Google Workspace, Slack, and Atlassian, delivering measurable outcomes.