SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 202,400 - 278,300 / annual
AlphaSense is a market intelligence platform trusted by over 6,000 enterprise customers, including a majority of the S&P 500. The company delivers AI-driven insights from public and private content including equity research, company filings, event transcripts, and expert calls. Founded in 2011 and headquartered in New York City, AlphaSense has 2,000+ employees across offices in the US, UK, Finland, India, Singapore, Canada, and Ireland.
The User Management team owns the full identity lifecycle at AlphaSense—user creation and provisioning, identity management, authentication, and authorization. This is a platform team, not a product team: you build the identity and access infrastructure that other engineering teams depend on, rather than shipping user-facing features. The team is well-established and senior, based in Helsinki, and is now expanding into North America to build follow-the-sun coverage and scale toward a true self-serve platform model.
As a Staff Engineer on this team, you will design, build, and evolve three core pillars in equal measure: the authorization platform (RBAC/ABAC/ReBAC), the authentication platform, and the user management platform. You'll work across all three domains—not just one—designing systems that scale with a constantly growing customer base. Security is core to this role: you'll partner closely with security teams to ensure systems are secure by design and compliant with SOC2 and GDPR.
Key responsibilities include:
- Design and evolve authorization, authentication, and user management platforms
- Build self-service systems and APIs (GraphQL, gRPC, REST) for product engineering teams
- Partner with security teams on secure-by-design systems aligned with SOC2 and GDPR
- Design highly scalable systems supporting a growing user and customer base
- Help define long-term roadmap across all three identity domains
- Drive projects autonomously from North America while staying aligned with the Helsinki-based team
- Champion testing, observability, and reliability practices
This role requires a genuinely senior, self-sufficient engineer who doesn't just execute a roadmap but helps shape it. You should be comfortable working in a distributed, cross-timezone setup and have strong experience building and operating identity, authentication, or authorization platforms at scale, ideally in a platform/product-platform engineering context.
REQUIREMENTS:
- Backend: Java 2.X, Spring Boot 3.X.X, WebFlux, Maven
- Data & APIs: SQL, GraphQL, gRPC, REST
- Cloud & Infrastructure: AWS, GCP, Kubernetes, Helm
- Identity & Security Protocols: RBAC/ABAC/ReBAC; OAuth 2.0, OIDC, and JWT; SAML 2.0 and enterprise SSO federation (assertion validation, signature/encryption handling, IdP- vs. SP-initiated flows); SCIM for user provisioning and deprovisioning
- Engineering Practices: Event-driven architecture patterns; TDD or genuine passion for automated testing
Nice to have:
- Auth0 experience
- SpiceDB / Zanzibar-style authorization system experience
- Apollo Federation
- OpenTelemetry
- Experience operating within SOC2 and/or GDPR-compliant environments
