4 hours ago
Remote, IndiaStaff+
Responsibilities
- Own the technical vision, roadmap, architecture, and migration strategy for the authentication and authorization platform.
- Design, build, and operate scalable API gateway and identity services primarily in Golang using AWS and relational databases.
- Lead phased, zero-downtime migrations with rollback and safety mechanisms.
- Establish authentication and authorization standards covering OAuth2, OIDC, tokens, service-to-service authentication, RBAC, ABAC, and policy engines.
- Drive consistency, scalability, performance, reliability, observability, and secure-by-default practices across distributed services.
- Partner with Security and Compliance on fintech-grade security and regulatory requirements.
- Participate in on-call rotations, incident response, and postmortems for owned services.
- Mentor engineers, influence technical direction across teams, and translate business goals into technical roadmaps.
- Help establish effective AI-assisted development practices for security-sensitive systems.
Requirements
- 12+ years of professional software engineering experience, including significant backend experience.
- Recent experience deploying significant changes to a production application within the past 30 days.
- Deep hands-on expertise with authentication and authorization systems, including OAuth2, OpenID Connect, SAML, JWT, session-based authentication, token lifecycle management, RBAC, ABAC, and policy-as-code.
- Experience designing, building, or operating an API gateway or authentication proxy at scale.
- A proven record leading large-scale service extraction or migration with minimal customer impact.
- Strong Golang proficiency and experience building RESTful APIs.
- Expertise with SQL-based relational databases, including MySQL and PostgreSQL, and performance optimization.
- Understanding of distributed systems patterns, event-driven architecture, queues, and high-throughput edge services.
- Ability to influence decisions, lead complex initiatives across teams, and mentor engineers.
- Current practical use of AI development tools such as Claude Code, Codex, Cursor, or custom LLM integrations.
- Bachelor’s degree in Computer Science or a similar technical field.
- Preferred experience with identity platforms such as Keycloak, Auth0, Okta, Ory, or in-house identity providers.
- Preferred experience with Envoy, Istio, mTLS, rate limiting, WAF integration, threat modeling, secure design review, and authentication attack vectors.
- Preferred experience with Prometheus, Grafana, Datadog, New Relic, AWS Aurora RDS, Docker, Kubernetes, CI/CD pipelines, fintech, payments, or financial compliance.
Benefits
- Fully remote work arrangement with no relocation or commute required.
- Principal-level scope and ownership at a growing fintech company.
- Opportunities for career advancement, technical leadership, mentoring, and cross-functional impact.
- Full-time employment.
Tech Stack
AmbassadorAWSDatadogDockerElasticsearchGitGoGrafanaIstioKubernetesMySQLPostgreSQLPrometheusPythonReactReact NativeTypeScript
About Sezzle
Sezzle builds a buy now, pay later platform that lets consumers split purchases into interest-free installments online and in stores, integrated with e-commerce and retail merchants. The company earns revenue from merchant fees and related consumer charges and provides underwriting and payment processing services. Founded in 2016 and headquartered in Minneapolis, Sezzle is a public company dual-listed on Nasdaq and the ASX.