Staff Engineer

Responsibilities

• Design, build, and evolve authorization systems using RBAC, ABAC, and ReBAC.
• Design, build, and evolve authentication systems and work closely with the Auth0 integration.
• Build and operate user management, provisioning, identity, and entitlement systems for AlphaSense’s customer base.
• Partner with security teams to implement secure-by-design platforms aligned with SOC2 and GDPR requirements.
• Design scalable systems and self-service GraphQL, gRPC, and REST APIs for product engineering teams.
• Define the long-term roadmap across authentication, authorization, and user management.
• Drive projects autonomously from Canada while collaborating with the Helsinki-based team.
• Champion testing, observability, and reliability practices across the platform.

Requirements

• Strong experience building and operating identity, authentication, or authorization platforms at scale.
• Strong backend experience with Java, Spring Boot, WebFlux, and Maven.
• Experience with SQL, GraphQL, gRPC, REST, AWS, GCP, Kubernetes, and Helm.
• Knowledge of RBAC, ABAC, ReBAC, OAuth 2.0, OIDC, JWT, SAML 2.0, enterprise SSO federation, and SCIM.
• Experience with event-driven architecture patterns and TDD or a strong commitment to automated testing.
• Ability to shape roadmaps, drive execution autonomously, and collaborate effectively across time zones.
• Interest in security and experience partnering with security teams on secure-by-design systems.
• Auth0 experience is a preferred qualification.
• SpiceDB or Zanzibar-style authorization system experience is preferred.
• Apollo Federation and OpenTelemetry experience are preferred.
• Experience in SOC2- and/or GDPR-compliant environments is preferred.

Benefits

• Equity may be offered.
• Generous benefits program.
• Role is based in Canada and collaborates closely with a Helsinki-based team in a distributed, cross-time-zone setup.