Senior Software Engineer I

SE2 Digital Service LLP; Atlanta (GA); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Health insurance

Parental leave

401(k)

Incentive/bonus opportunity

Tuition reimbursement

Job summary

Zinnia is seeking a Senior Software Engineer to join our Enterprise API & CIAM team. You’ll extend a production CIAM platform, build identity flows, and evolve authorization models across Zinnia Live, Market Connect, and TPA services.

You’ll work with CIAM leads, product management, and security partners in a regulated insurance environment. The role requires 6+ years in software dev, cloud experience, and strong backend skills.

Qualifications

• 6+ years of professional software development experience.
• Cloud production services experience (AWS preferred).
• Hands-on OAuth 2.0 / OIDC / SAML with federation.
• Experience with a CIAM platform (Auth0/Okta/PingOne).

Responsibilities

• Build and evolve authentication flows including SSO and passwordless login.
• Design fine-grained authorization (RBAC/ABAC/REBAC) for carriers, products, and distributors.
• Automate provisioning and lifecycle management for access control.
• Design, document, and maintain CIAM APIs used by other teams.
• Onboard new applications to CIAM integration patterns.
• Ensure quality via automated tests, reviews, observability, and on-call.
• Collaborate with security/compliance to support audits and logging.

Skills

TypeScript/Node.js

OAuth 2.0 / OpenID Connect / SAML

RBAC / ABAC / ReBAC

CI/CD / IaC

Containers / cloud

API design

Security awareness

Agile / Scrum

Communication

Education

BS/BA in Computer Science or related field

Tools

Auth0

Okta

PingOne

Job description

Zinnia is the leading technology platform for accelerating life and annuities growth. With innovative enterprise solutions and data insights, Zinnia simplifies the experience of buying, selling, and administering insurance products. All of which enables more people to protect their financial futures. Our success is driven by a commitment to three core values: be bold, team up, deliver value – and that we do. Zinnia has over $180 billion in assets under administration, serves 100+ carrier clients, 2500 distributors and partners, and over 2 million policyholders.

WHO YOU ARE:

Zinnia is looking for a Senior Software Engineer to join our Enterprise API & CIAM team. Our Customer Identity and Access Management (CIAM) platform handles authentication and fine-grained authorization for carriers, distributors, agents, policyholders, and service integrations across Zinnia Live, Market Connect, and our TPA services. You’ll extend and scale this production platform by building new identity flows, evolving our authorization model, and helping product teams across Zinnia integrate securely. You’ll work closely with the CIAM tech lead, product management, and security and compliance partners in a regulated insurance environment.

WHAT YOU’LL DO:

• Build and evolve authentication flows, including workforce SSO federation (SAML/OIDC), passwordless login for agents and consumers, and machine-to-machine access for service integrations.
• Design and implement fine-grained authorization that combines role-, attribute-, and relationship-based access control (RBAC, ABAC, ReBAC) to scope access by carrier, product, distributor, hierarchy, and delegation.
• Build automated provisioning and lifecycle handling so access stays current as users are onboarded, transferred, given delegated access, or terminated.
• Design, document, and maintain the CIAM APIs that other Zinnia teams consume.
• Partner with product teams to onboard new applications onto our CIAM integration pattern.
• Own the quality and reliability of what you ship through automated testing, code review, observability, and on-call participation.
• Work with security and compliance teams to implement access controls, support audits, and keep every access decision logged and explainable.

WHAT YOU’LL NEED:

• 6+ years of professional software development experience, including building and operating production services in the cloud (AWS preferred).
• Hands-on experience implementing OAuth 2.0, OpenID Connect, and SAML, including federation with external identity providers.
• Experience with a CIAM platform such as Auth0 (preferred), Okta, or PingOne.
• Experience designing authorization systems beyond basic roles, such as attribute- or relationship-based models.
• Strong backend skills in TypeScript/Node.js, or a comparable language, with solid fundamentals in API design, testing, and software design.
• Working knowledge of CI/CD, infrastructure as code, containers, and monitoring and alerting.
• Clear written and verbal communication, and the ability to work with engineers, product managers, and security partners across a distributed team.
• Experience working in an Agile/Scrum environment.

BONUS POINTS:

• Experience with OpenFGA, Auth0 FGA, or other Zanzibar-style authorization systems.
• Experience with event-driven architectures (Kafka/Confluent), API gateways (Kong), MongoDB, Terraform, or Datadog.
• Background in insurance, financial services, or another regulated industry, especially agent and distributor hierarchies, licensing and appointments, or delegated access.

WHAT’S IN IT FOR YOU?

Zinnia offers excellent career progression and competitive compensation. We offer great benefits, including health/dental insurance, parental leave, 401(k), incentive/bonus opportunity, tuition reimbursement, and so much more. We’re looking for the best and brightest innovators in the industry to join our team. At Zinnia, you collaborate with smart, creative professionals who are dedicated to delivering cutting-edge technologies, deeper data insights, and enhanced services to transform how insurance is done.

• health/dental insurance
• parental leave
• 401(k)
• incentive/bonus opportunity
• tuition reimbursement

We are an Equal Opportunity employer committed to a diverse workforce. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability.

Notice for California residents: Information about how we collect and use your personal information can be found here.

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in Zinnia’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.

As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.