Security Engineer (Identity) – Remote

About the role

We are looking for a Security Engineer specialized in Identity to design, build and operate the authentication and authorization backbone of our cloud‑native platforms. You will ensure that users and services access resources securely across multi‑tenant environments while supporting high‑scale operations.

Key responsibilities

• Architect, deploy and maintain scalable identity solutions using OAuth2, OpenID Connect, SAML and JWT.
• Design fine‑grained authorization models such as RBAC and Zanzibar‑style policies (e.g., SpiceDB, OpenFGA) to enforce precise resource control.
• Integrate and manage centralized identity providers like Auth0, Okta or AWS Cognito across distributed services.
• Develop secure multi‑tenant patterns that guarantee data isolation and prevent cross‑tenant access.
• Collaborate with engineering teams to embed identity‑first security and zero‑trust principles throughout the development lifecycle.
• Maintain identity lifecycle processes including federation, single sign‑on and secure token handling.

Required profile

• Minimum 4 years of experience in security engineering, identity management or cybersecurity.
• Proven track record designing and operating large‑scale IAM architectures.
• Strong understanding of modern authentication and authorization standards.
• Advanced proficiency in English.

Required skills

• OAuth2
• OpenID Connect (OIDC)
• SAML
• JWT
• Auth0
• Okta
• AWS Cognito
• RBAC
• SpiceDB or OpenFGA (Zanzibar‑style models)

What we offer

• 100 % remote work from anywhere.
• Competitive compensation in USD or local currency.
• Provided hardware and software for home office.
• Flexible schedule and paid parental leave, vacations and holidays.
• Mentorship, skill development and career growth within a multicultural, top‑talent team.