5 days ago
Remote, MexicoStaff+
Responsibilities
- Own the technical vision, architecture, roadmap, and migration strategy for the authentication and authorization platform.
- Architect, design, and build scalable API gateway, identity, and authorization services primarily in Golang using AWS and relational databases.
- Lead phased, zero-downtime migrations with rollback and safety mechanisms.
- Establish standards for OAuth2/OIDC, JWT and opaque tokens, refresh tokens, mTLS, workload identity, RBAC, ABAC, and policy engines.
- Drive consistency, performance, reliability, observability, security, and CI/CD practices across distributed services.
- Partner with Security and Compliance on fintech-grade security and regulatory requirements.
- Participate in on-call rotations, incident response, and postmortems for owned services.
- Mentor engineers, influence technical decisions, lead complex initiatives, and translate business goals into technical roadmaps.
- Help establish effective AI-assisted engineering practices for security-sensitive systems.
Requirements
- 12+ years of professional software engineering experience, including significant backend experience.
- Deep hands-on expertise with authentication and authorization systems, including OAuth2, OpenID Connect, SAML, JWT, session-based authentication, token lifecycle management, RBAC, ABAC, and policy-as-code.
- Experience designing, building, or operating an API gateway or auth proxy at scale.
- Experience leading a large-scale service extraction or migration with minimal customer impact.
- Strong Golang proficiency and experience building and maintaining backend APIs.
- Expertise with SQL-based relational databases, including MySQL and PostgreSQL, and performance optimization of schemas and queries.
- Strong understanding of distributed systems, event-driven architecture, queues, and high-throughput, low-latency edge services.
- Ability to influence decisions, lead complex technical initiatives, and guide engineering teams.
- Current hands-on use of AI development tooling such as Claude Code, Codex, Cursor, or custom LLM integrations.
- Bachelor’s degree in Computer Science or a similar technical field is required.
- Preferred qualifications include experience with Keycloak, Auth0, Okta, Ory, service mesh and edge technologies, threat modeling, observability tools, AWS Aurora RDS, fintech or payments, Docker, Kubernetes, and commercial APIs or platform infrastructure.
Benefits
- Fully remote role with no relocation or commute required.
- Full-time principal-level role with broad technical ownership and opportunities for career advancement.
- Salary range of $6,000-$11,000 per month gross in USD, negotiable based on location and experience.
Tech Stack
AmbassadorAWSDatadogDockerElasticsearchGitGoGrafanaIstioKubernetesMySQLPostgreSQLPrometheusPythonReactReact NativeTypeScript
