jobapplier

Staff Engineer

AlphaSense

Skills

Required

  • RBAC / ABAC / ReBAC
  • Auth0
  • SOC2 / GDPR-compliant environments
  • secure-by-design systems
  • AWS
  • GCP
  • Kubernetes
  • Helm
  • Data & APIs
  • SQL
  • GraphQL
  • gRPC
  • Spring Boot
  • Maven

Preferred

  • patterns

Join AlphaSense, a leading AI-powered business insights platform. As a Staff Engineer on the User Management team, you'll be responsible for managing the full identity lifecycle, including user management, authentication, and authorization. You'll work closely with security teams to ensure our systems are secure by design and aligned with SOC2 and GDPR requirements. This role offers the opportunity to work from home and be part of a well-established and senior team based in Helsinki, Finland, while expanding into Canada for follow-the-sun coverage.

We're looking for a genuinely senior, self-sufficient engineer with strong experience building and operating identity, authentication, or authorization platforms at scale, ideally in a platform/product-platform engineering context

Apollo Federation

Responsibilities

  • Design, build, and evolve the authorization platform (RBAC/ABAC/ReBAC) to enable teams across the company to answer "what can this user do?"
  • Design, build, and evolve the authentication platform, covering authentication patterns across a range of use cases, and work closely with the Auth0 integration.
  • Design, build, and evolve the user management platform, creating, provisioning, and managing user identities and entitlements to support the entire customer base.

Requirements

  • You're genuinely interested in security, comfortable partnering closely with security teams on secure-by-design systems, and comfortable working in a distributed, cross-timezone setup — based in Canada, collaborating closely with a Helsinki-based team
  • Cloud & Infrastructure: AWS, GCP, Kubernetes, Helm

Data & APIs: SQL, GraphQL, gRPC, REST

  • Engineering Practices: Event-driven architecture patterns; TDD or a genuine passion for automated testing
  • Identity & Security Protocols: RBAC/ABAC/ReBAC; OAuth 2.0, OIDC, and JWT; SAML 2.0 and enterprise SSO federation (assertion validation, signature/encryption handling, IdP- vs. SP-initiated flows); SCIM for user provisioning and deprovisioning
  • Backend: Java 2X, Spring Boot 3.X.X, WebFlux, Maven
  • Auth0 experience
  • SpiceDB / Zanzibar-style authorization system experience
  • Experience operating within SOC2 and/or GDPR-compliant environments

Preferred

  • OpenTelemetry

Every job at AlphaSense