Senior Identity Engineer
Job description
About the role
Later is looking for a Senior Identity Engineer to help build and maintain the identity infrastructure that underpins their platform. This role involves designing secure authentication and authorization systems that serve users across multiple regions and product lines. The engineer will collaborate with cross functional teams to define identity requirements and translate them into reliable technical solutions. You will be responsible for the end to end lifecycle of identity services, from initial design through production deployment and ongoing maintenance. Later values close coordination with security, product, and platform engineering groups to ensure identity systems meet both functional and compliance needs.
Key facts
What you'll do
- Architect identity solutions that handle user registration, login, and session management at scale.
- Design and implement OAuth 2.0 and OpenID Connect flows for web and mobile client applications.
- Build secure token issuance and validation systems using industry standard identity protocols.
- Work with security teams to conduct thorough threat modeling and identity risk assessments.
- Develop well documented APIs and SDKs that internal product teams consume for authentication and user management.
- Own the identity data model and ensure consistency and integrity across all platform services.
- Write integration tests and automated checks for identity workflows and important edge cases.
- Troubleshoot authentication failures and diagnose performance bottlenecks in production environments.
- Mentor junior engineers on identity system design patterns and security best practices regularly.
- Collaborate with product managers to scope identity features and prioritize technical debt reduction.
- Participate in incident response for identity related outages and help drive postmortem analysis.
- Evaluate new identity technologies and present findings to the engineering organization for adoption decisions.
Requirements
- Bachelor degree in computer science or a related technical field is required for this position.
- Five or more years of professional experience building identity and authentication systems in production.
- Strong understanding of OAuth 2.0, OpenID Connect, SAML, and related identity and access protocols.
- Experience designing and deploying systems that handle millions of authenticated users reliably and at scale.
- Proficiency in at least one general purpose programming language such as Go or Python is expected.
- Familiarity with identity providers like Auth0, Okta, or custom built identity solutions is a plus.
- Demonstrated ability to write secure code and review security sensitive implementations with care.
- Comfort working in a distributed engineering environment with asynchronous communication norms and remote collaboration.
- Experience with identity governance frameworks and the ability to audit access controls across systems.
- Familiarity with identity data standards and the ability to work with user profile schemas.
Nice to have
- Experience with multi tenant identity architectures that serve different customer segments or use cases.
- Knowledge of privacy regulations such as GDPR and their impact on identity data handling.
- Contributions to open source identity or authentication related projects hosted on GitHub.
- Familiarity with hardware security modules or key management services available in cloud environments.
- Experience with rate limiting and abuse prevention mechanisms for identity endpoints and login flows.
- Background in working with regulated industries where identity verification and compliance are critical.
Skills & tools
- Programming languages including Go, Python, or Java for building backend identity services.
- Protocol standards such as OAuth 2.0, OpenID Connect, SAML, and JSON Web Tokens.
- Identity platforms and providers including Auth0, Okta, or custom built identity solutions.
- Cloud infrastructure services from AWS, GCP, or Azure for hosting identity systems.
- Database systems such as PostgreSQL or DynamoDB for storing identity records and tokens.
- Monitoring and observability tools for tracking authentication latency and error rates in production.
- Version control systems such as Git and code review practices are part of daily work.
- CI/CD pipelines and deployment automation tools for shipping identity service changes reliably.
Practical notes
- This is a remote position and candidates may be based in any of the listed regions.
- The hiring process includes technical interviews focused on identity system design and coding exercises.
- Candidates should expect to work across time zones with distributed team members regularly.
- Later values written communication and documentation as part of the daily engineering workflow and decisions.
- The role reports to the engineering manager and works within a small focused identity team.
- Relocation assistance or remote work setup support may be available depending on the region.
About the company
Influencer marketing built for creators and trusted by brands. Run campaigns, manage social media, and track performance with AI-powered insights.