5 days ago
Remote, ColombiaStaff+
Responsibilities
- Own the technical vision and roadmap for the authentication and authorization platform, including the API auth gateway and identity services.
- Architect, design, build, and operate scalable, highly available gateway and identity services primarily in Golang using AWS and relational databases.
- Lead phased, zero-downtime migrations with rollback and safety mechanisms.
- Define authentication and authorization standards covering OAuth2/OIDC, tokens, service-to-service authentication, RBAC, ABAC, and policy engines.
- Drive consistency, scalability, performance, reliability, and latency improvements across distributed microservices and edge services.
- Partner with Security and Compliance on fintech-grade security and regulatory requirements.
- Establish engineering practices for observability, security, and CI/CD on the auth-critical path.
- Participate in on-call rotation and help lead incident response and postmortems.
- Mentor engineers, influence technical direction, and translate business goals into technical roadmaps.
Requirements
- 12+ years of professional software engineering experience, including significant backend experience.
- Recent experience deploying significant production application changes within the past 30 days.
- Deep hands-on expertise with authentication and authorization systems, including OAuth2, OpenID Connect, SAML, JWT, session-based authentication, token lifecycle management, RBAC, ABAC, and policy-as-code.
- Experience designing, building, or operating an API gateway or auth proxy at scale.
- Experience leading large-scale service extraction or migration with minimal customer impact.
- Strong Golang proficiency and experience building RESTful APIs.
- Expertise with SQL-based relational databases, including MySQL and PostgreSQL, and performance optimization of schemas and queries.
- Understanding of distributed systems patterns such as transactional outbox, event-driven architecture, and queues.
- Ability to influence decisions and lead complex technical initiatives across teams.
- Current hands-on use of AI development tools such as Claude Code, Codex, Cursor, or custom LLM integrations.
- Bachelor’s degree in Computer Science or a similar technical field.
- Preferred: experience with Keycloak, Auth0, Okta, Ory, service mesh and edge technologies, threat modeling, secure design review, Prometheus, Grafana, Datadog, New Relic, AWS Aurora RDS, Docker, Kubernetes, fintech, payments, compliance, and commercial APIs or platform infrastructure.
Benefits
- Fully remote work arrangement with no relocation or commute required.
- Monthly compensation is negotiable based on location and experience.
- Principal-level scope and ownership at a growing fintech.
- Opportunity to lead foundational authentication, authorization, and platform infrastructure initiatives.
- Opportunities for career advancement, technical leadership, mentoring, and cross-functional collaboration.
Tech Stack
AmbassadorAWSDatadogDockerElasticsearchGitGoGrafanaIstioKubernetesMySQLPostgreSQLPrometheusPythonReactReact NativeTypeScript
