12 hours ago
Toronto, CanadaStaff+
Responsibilities
- Provide technical leadership and architect the evolution of the UIAM platform, including authentication, SSO, and authorization.
- Design secure, scalable identity capabilities on public cloud platforms using Auth0 for human and machine-to-machine clients.
- Collaborate with security teams to implement zero-trust, least-privilege, and secure-by-design practices.
- Translate business and customer identity requirements into actionable technical specifications with product managers.
- Mentor senior developers and foster an inclusive, high-performance engineering culture.
- Create architectural documentation, promote effective tools, build proofs of concept, and participate in architectural reviews.
- Develop high-availability, low-latency data access capabilities for authorization decisions.
Requirements
- 8+ years of scalable software development experience and at least 2 years in a technical leadership role driving platform modernization.
- Deep expertise in identity and access management, including OAuth 2.0, OpenID Connect, SAML, JWT, and SSO federation.
- Hands-on experience with Auth0 tenant architecture and custom actions, plus familiarity with Okta, Ping, and SCIM provisioning.
- Strong software architecture skills with an API-first approach, loosely coupled systems, and domain-driven design.
- Proficiency in object-oriented programming with Java and Python, including Spring Boot and FastAPI.
- Extensive cloud-native experience across AWS and GCP, including infrastructure-as-code, DevSecOps, and CI/CD practices.
- Experience with threat modeling, least privilege, secrets management, comprehensive audit logging, and domain-driven database design.
- Strong communication skills, including the ability to write architecture decision records and influence tool adoption.
- Ability to work effectively in an agile, fast-paced environment and use AI-assisted development practices.
Benefits
- Flexible hybrid work approach with no set in-office requirement for employees located near a Benevity office.
- Growth opportunities, purpose-driven work, caring coworkers, and an inclusive culture with investment in diversity, equity, inclusion, and belonging.
- Hiring accommodations are available for candidates with disabilities.
About Benevity
Benevity builds an enterprise SaaS platform for corporate social impact, covering employee giving, volunteering, grants management, ERGs, and donation processing with global charity vetting. Companies use it to run and measure programs for employees and customers, with integrations and payment rails. Founded in 2008 and headquartered in Calgary, it is privately held and part of Hg’s portfolio, serving many large, multinational brands.