12 hours ago
Calgary, Canada or Vancouver, CanadaStaff+
Responsibilities
- Provide technical leadership for the UIAM platform and architect authentication, SSO, authorization, and identity lifecycle capabilities.
- Design secure and scalable identity services on public cloud platforms using Auth0 for human and machine-to-machine clients.
- Collaborate with security teams to implement zero-trust, least-privilege, and secure-by-design practices.
- Translate customer and business identity requirements into technical specifications with product managers.
- Mentor senior developers and foster an inclusive, high-performance engineering culture.
- Create architecture documentation, proofs of concept, and architectural review materials.
- Build high-availability, low-latency data access for authorization decisions and promote effective engineering tools.
Requirements
- 8+ years of scalable software development experience, including at least 2 years in a technical leadership role driving platform modernization.
- Deep expertise in identity and access management, including OAuth 2.0, OpenID Connect, SAML, JWT, and SSO federation.
- Hands-on experience with Auth0 tenant architecture and custom actions, plus familiarity with Okta, Ping, and SCIM provisioning.
- Strong software architecture skills using API-first, loosely coupled systems and domain-driven design approaches.
- Proficiency in object-oriented programming with Java and Python, including Spring Boot and FastAPI.
- Extensive cloud-native experience across AWS and GCP, including infrastructure-as-code, DevSecOps, and modern CI/CD pipelines.
- Experience with threat modeling, least privilege, secrets management, comprehensive audit logging, and domain-driven database design.
- Excellent communication skills, including the ability to write architecture decision records and influence tool adoption.
- Ability to work in a fast-paced agile environment, navigate ambiguity, and use AI-assisted development practices.
Benefits
- Flexible hybrid work approach with no set in-office requirement for employees located near an office.
- Growth opportunities, collaborative coworkers, and purpose-driven work focused on social impact.
- Inclusive workplace with investment in diversity, equity, inclusion, and belonging and employee resource groups.
- Accommodations are available throughout the hiring and assessment process for candidates with disabilities.
About Benevity
Benevity builds an enterprise SaaS platform for corporate social impact, covering employee giving, volunteering, grants management, ERGs, and donation processing with global charity vetting. Companies use it to run and measure programs for employees and customers, with integrations and payment rails. Founded in 2008 and headquartered in Calgary, it is privately held and part of Hg’s portfolio, serving many large, multinational brands.