SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: CAD 164,450 - 226,550 / annual
AlphaSense is a market intelligence platform trusted by over 6,000 enterprise customers, including a majority of the S&P 500. The company delivers AI-driven insights from public and private content including equity research, company filings, event transcripts, and expert calls. Founded in 2011 and headquartered in New York City, AlphaSense has 2,000+ employees across offices in the US, UK, Finland, India, Singapore, Canada, and Ireland.
The User Management team owns the full identity lifecycle at AlphaSense—user creation and provisioning, identity management, authentication, and authorization. This is a platform team, not a product team: you build the identity and access infrastructure that other engineering teams depend on, rather than shipping user-facing features. The team is well-established and senior, based in Helsinki, Finland, and is now expanding into Canada to provide follow-the-sun support and scale toward a true self-serve platform model.
As a Staff Engineer on this team, you will design, build, and evolve systems across all three pillars of identity: user management (creating, provisioning, and managing identities), authentication (verifying who users are), and authorization (determining what users can do). You'll work on highly scalable systems that support a constantly growing customer base and nearly every product engineering team at AlphaSense. Security is core to this role—you'll partner closely with security teams to ensure systems are secure by design, compliant with SOC2 and GDPR, and built to handle enterprise-scale identity and access challenges.
Key responsibilities include: designing and evolving the authorization platform (RBAC/ABAC/ReBAC); designing and evolving the authentication platform, including Auth0 integration; designing and evolving the user management platform supporting the entire customer base; partnering with security teams on secure-by-design systems; designing highly scalable systems that keep pace with growing users and customers; helping define long-term roadmap across all three domains; building self-service systems and APIs (GraphQL, gRPC, REST) for product engineering teams; driving projects autonomously from Canada while staying aligned with the Helsinki-based team; and championing strong testing, observability, and reliability practices.
This role requires a genuinely senior, self-sufficient engineer who doesn't just execute a roadmap but helps understand the needs behind it, shapes it, and drives execution largely autonomously. You should be genuinely interested in security, comfortable working in a distributed cross-timezone setup, and experienced building and operating identity, authentication, or authorization platforms at scale, ideally in a platform/product-platform engineering context.
REQUIREMENTS:
- Backend: Java 2.X, Spring Boot 3.X.X, WebFlux, Maven
- Data & APIs: SQL, GraphQL, gRPC, REST
- Cloud & Infrastructure: AWS, GCP, Kubernetes, Helm
- Identity & Security Protocols: RBAC/ABAC/ReBAC; OAuth 2.0, OIDC, and JWT; SAML 2.0 and enterprise SSO federation (assertion validation, signature/encryption handling, IdP- vs. SP-initiated flows); SCIM for user provisioning and deprovisioning
- Engineering Practices: Event-driven architecture patterns; TDD or genuine passion for automated testing
Nice to Have:
- Auth0 experience
- SpiceDB / Zanzibar-style authorization system experience
- Apollo Federation
- OpenTelemetry
- Experience operating within SOC2 and/or GDPR-compliant environments
