AlphaSense - Staff Software Engineer, Identity & Access Management
Requirements
• Backend: Java 2X, Spring Boot 3.X.X, WebFlux, Maven • Backend: • Data & APIs: SQL, GraphQL, gRPC, REST • Data & APIs: • Cloud & Infrastructure: AWS, GCP, Kubernetes, Helm • Cloud & Infrastructure: • Identity & Security Protocols: RBAC/ABAC/ReBAC; OAuth 2.0, OIDC, and JWT; SAML 2.0 and enterprise SSO federation (assertion validation, signature/encryption handling, IdP- vs. SP-initiated flows); SCIM for user provisioning and deprovisioning • Identity & Security Protocols: • Engineering Practices: Event-driven architecture patterns; TDD or a genuine passion for automated testing • Engineering Practices: • Auth0 experience • SpiceDB / Zanzibar-style authorization system experience • Apollo Federation • Experience operating within SOC2 and/or GDPR-compliant environments
Responsibilities
• This role spans all three pillars of our identity platform in equal measure — this is not an authorization-only or authentication-only role. • Design, build, and evolve our authorization platform (RBAC/ABAC/ReBAC), enabling teams across the company to answer "what can this user do?" • authorization platform • Design, build, and evolve our authentication platform, covering authentication patterns across our range of use cases, working closely with our Auth0 integration • authentication platform • Design, build, and evolve our user management platform — creating, provisioning, and managing user identities and entitlements — supporting our entire customer base • user management platform • Partner closely with security teams to ensure our authentication, authorization, and user management platforms are secure by design and aligned with SOC2 and GDPR requirements • Design and implement highly scalable systems that keep pace with a constantly growing number of users and customers • Help define the long-term roadmap across all three domains — authentication, authorization, and user management — not just execute against one handed to you • Build self-service systems and APIs (GraphQL, gRPC, REST) that make authentication, authorization, and user data consumable by product engineering teams across the company • Drive projects autonomously from Canada while staying closely aligned with our Helsinki-based team • Champion strong testing, observability, and reliability practices across the platform • For base compensation, we set standard ranges for all roles based on function and level benchmarked against similar stage growth companies and internal comparables. In order to be compliant with local legislation, as well as to provide greater transparency to candidates, we share salary ranges on all job postings regardless of desired hiring location. Final offer amounts are determined by multiple factors including candidate experience/expertise and may vary from the amounts listed below. • You may also be offered equity, and a generous benefits program.
Benefits
• $164,450—$226,550 CAD • AlphaSense is an equal-opportunity employer. We are committed to a work environment that supports, inspires, and respects all individuals. All employees share in the responsibility for fulfilling AlphaSense’s commitment to equal employment opportunity. AlphaSense does not discriminate against any employee or applicant on the basis of race, color, sex (including pregnancy), national origin, age, religion, marital status, sexual orientation, gender identity, gender expression, military or veteran status, disability, or any other non-merit factor. This policy applies to every aspect of employment at AlphaSense, including recruitment, hiring, training, advancement, and termination. • In addition, it is the policy of AlphaSense to provide reasonable accommodation to qualified employees who have protected disabilities to the extent required by applicable laws, regulations, and ordinances where a particular employee works. • Recruiting Scams and Fraud • We at AlphaSense have been made aware of fraudulent job postings and individuals impersonating AlphaSense recruiters. These scams may involve fake job offers, requests for sensitive personal information, or demands for payment. Please note: • AlphaSense never asks candidates to pay for job applications, equipment, or training. • All official communications will come from an @alpha-sense.com email address. • If you’re unsure about a job posting or recruiter, verify it on our Careers page. • If you believe you’ve been targeted by a scam or have any doubts regarding the authenticity of any job listing purportedly from or on behalf of AlphaSense please contact us. Your security and trust matter to us.
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT