5 days ago
Remote, ArgentinaStaff+
Responsibilities
- Own the technical vision and roadmap for the authentication and authorization platform, including the API auth gateway and identity services.
- Architect, design, build, and operate scalable, highly available gateway and identity services primarily in Golang using AWS and relational databases.
- Lead phased, zero-downtime migrations with rollback and safety mechanisms.
- Establish authentication, authorization, token, service-to-service authentication, and fine-grained policy standards.
- Drive scalability, reliability, performance, observability, security, and CI/CD consistency across distributed services.
- Partner with Security, Compliance, Product, Support, and engineering teams on secure fintech-grade platform capabilities.
- Participate in on-call rotations and lead incident response and postmortems for owned services.
- Mentor engineers, influence technical direction, translate business goals into roadmaps, and promote effective AI-assisted development.
Requirements
- 12+ years of professional software engineering experience, including significant backend experience.
- Recent experience deploying significant production application changes within the past 30 days.
- Deep hands-on expertise with OAuth2, OpenID Connect, SAML, JWT, session-based authentication, token lifecycle management, RBAC, ABAC, and policy-as-code.
- Experience designing, building, or operating an API gateway or auth proxy at scale.
- Experience leading large-scale service extraction or migration with zero or minimal customer impact.
- Strong Golang proficiency and experience building and maintaining RESTful APIs.
- Expertise with SQL-based relational databases, including MySQL and PostgreSQL, and performance optimization.
- Strong distributed-systems knowledge, including transactional outbox, event-driven architecture, queues, and high-throughput edge services.
- Ability to influence decisions, lead complex initiatives across teams, and mentor engineers.
- Current hands-on use of AI development tools such as Claude Code, Codex, Cursor, or custom LLM integrations.
- Bachelor’s degree in Computer Science or a similar technical field.
- Preferred qualifications include experience with Keycloak, Auth0, Okta, Ory, service mesh, Envoy, Istio, mTLS, rate limiting, WAF integration, threat modeling, Prometheus, Grafana, Datadog, New Relic, AWS Aurora RDS, fintech compliance, Docker, Kubernetes, and commercial APIs or platform infrastructure.
Benefits
- Fully remote work arrangement with no relocation or commute required.
- Full-time principal-level role with significant technical ownership and career advancement opportunities.
- Opportunity to work on foundational authentication, authorization, security, and fintech platform infrastructure.
- Collaboration with cross-functional teams and mentoring opportunities in a learning-oriented engineering culture.
Tech Stack
AmbassadorAWSDatadogDockerElasticsearchGitGoGrafanaIstioKubernetesMySQLPostgreSQLPrometheusPythonReactReact NativeTypeScript
