SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
AlphaSense is a market intelligence platform trusted by over 6,000 enterprise customers, including a majority of the S&P 500. The company delivers AI-driven insights from public and private content including equity research, company filings, event transcripts, and news. Founded in 2011 and headquartered in NYC with 2,000+ employees globally, AlphaSense recently acquired Tegus to expand its capabilities.
The User Management team owns the complete identity lifecycle at AlphaSense—user creation and provisioning, identity management, authentication, and authorization. This is a platform engineering team, not a product team: you build the identity and access infrastructure that other engineering teams depend on, rather than shipping user-facing features. The team is well-established and senior, based in Helsinki, and is now expanding into Canada to provide follow-the-sun support and scale toward a true self-serve platform model.
As a Staff Engineer, you'll design and operate identity, authentication, and authorization systems at scale for a constantly growing customer base. You'll work across all three pillars equally—user management, authentication, and authorization—designing systems that scale securely. Security is core to this role: you'll partner closely with security teams on secure-by-design systems in a SOC2 and GDPR-governed environment.
You're a genuinely senior, self-sufficient engineer with strong experience building and operating identity platforms at scale, ideally in a platform/product-platform context. You don't just execute roadmaps—you help understand the needs behind them, shape them, and drive execution largely autonomously while collaborating closely with the Helsinki-based core team. You're genuinely interested in security, comfortable with distributed cross-timezone work, and excited about the technical depth of identity systems.
Key technical areas: Java 2.x, Spring Boot 3.x, WebFlux, Maven; SQL, GraphQL, gRPC, REST; AWS, GCP, Kubernetes, Helm; RBAC/ABAC/ReBAC; OAuth 2.0, OIDC, JWT; SAML 2.0 and enterprise SSO federation; SCIM for user provisioning; event-driven architecture; TDD and automated testing. Nice-to-haves include Auth0, SpiceDB/Zanzibar-style systems, Apollo Federation, OpenTelemetry, and SOC2/GDPR operational experience.
