Staff Engineer, Identity & Access Platform

BetterCloud; United States; Remote; USD 117,289 - 161,579; Full time

Benefits offered by this job

Equity

Benefits program

Job summary

AlphaSense is seeking a Staff Engineer to own and evolve identity, authentication, and authorization platforms at scale. You will design secure, scalable systems and collaborate with security teams to meet SOC2 and GDPR requirements.

The role spans user management, authentication, and authorization across global teams, including Canada and Helsinki. Ideal candidates are senior, autonomous, and proficient with GraphQL, REST, and gRPC, plus experience with Auth0, SpiceDB, or Zanzibar-style

Qualifications

• Senior, self-sufficient engineer with experience building identity/auth platforms at scale.
• Experience working in a platform/product-platform engineering context.
• Security-focused with ability to partner with security teams on secure-by-design systems (SOC2 and GDPR).
• Willingness to collaborate across time zones (Canada + Helsinki).

Responsibilities

• Design, build, and evolve our authorization platform (RBAC/ABAC/ReBAC).
• Design, build, and evolve our authentication platform, including Auth0 integration.
• Design, build, and evolve our user management platform for the entire customer base.
• Partner with security teams to ensure secure-by-design and SOC2/GDPR alignment.
• Define long-term roadmap across authentication, authorization, and user management.

Skills

Java 2X

Spring Boot

WebFlux

SQL

GraphQL

gRPC

REST

AWS

GCP

Kubernetes

OAuth 2.0 / OIDC / JWT

SAML 2.0

RBAC/ABAC/ReBAC

Tools

Auth0

SpiceDB

Zanzibar-style authorization

Apollo Federation

OpenTelemetry

Job description

AlphaSense is seeking a Staff Engineer to own and evolve identity, authentication, and authorization platforms at scale. You will design secure, scalable systems and collaborate with security teams to meet SOC2 and GDPR requirements.

The role spans user management, authentication, and authorization across global teams, including Canada and Helsinki. Ideal candidates are senior, autonomous, and proficient with GraphQL, REST, and gRPC, plus experience with Auth0, SpiceDB, or Zanzibar-style