Senior Software Engineer - Identity and Access Management

13 hours ago Senior Software Engineer, Identity & Access Management Senior Remote Helsinki, Uusimaa, Finland SQLKubernetesJavaGraphQLSpringAWSGCP Job Description About : The world’s most sophisticated companies rely on to remove uncertainty from decision-making. With market intelligence and search built on proven AI, delivers insights that matter from content you can trust. Our universe of public and private content includes equity research, company filings, event transcripts, expert calls, news, trade journals, and clients’ own research content. The acquisition of Tegus by in 2024 advances our shared mission to empower professionals to make smarter decisions through AI-driven market intelligence. Together, and Tegus will accelerate growth, innovation, and content expansion, with complementary product and content capabilities that enable users to unearth even more comprehensive insights from thousands of content sets. Our platform is trusted by over 6,000 enterprise customers, including a majority of the S&P 500. Founded in 2011, is headquartered in New York City with more than 2,000 employees across the globe and offices in the U.S., U.K., Finland, India, Singapore, Canada, and Ireland. Come join us! About The Team: The User Management team owns the full identity lifecycle at — from creating and provisioning users, through managing their identities, to authenticating who they are and authorizing what they can do in the system. Our work spans three core domains:User Management — creating, provisioning, and managing user identitiesAuthentication — verifying who users areAuthorization — determining what users can do in the system We are a product platform team, not a product team: we build the identity and access infrastructure that other engineering teams build on top of, rather than shipping user-facing features ourselves. We also act as a security guardrail for , since identity and access sit at the center of how the platform stays secure. The team is well-established and senior, based in Helsinki, Finland, and pushing deliberately toward a true platform model — scaling our authentication and authorization systems so they can be safely self-served by teams across the company. About The Role: This is a Senior Engineer role on the team that manages identity and access for 's entire, and constantly growing, customer base, and that nearly every product engineering team depends on for user and entitlement data. You'll work across all three pillars of identity: creating and managing users, authenticating them, and authorizing what they can do — designing systems built to scale with a constantly growing number of users. Security is core to this role, not adjacent to it — you'll work closely with our security teams to make sure what we build is secure by design, in an environment governed by SOC2 and GDPR. We're looking for a strong, self-sufficient engineer with solid experience building and operating identity, authentication, or authorization platforms at scale, ideally in a platform/product-platform engineering context. You can take deep technical ownership of complex problems and execute independently, while contributing ideas and input into our broader roadmap alongside the rest of the team. You're genuinely interested in security, comfortable partnering closely with security teams on secure-by-design systems, and ready to work closely, day-to-day, with the rest of the team here in Helsinki. Who You Are: Backend: Java 2X, Spring Boot 3.X.X, WebFlux, MavenData & APIs: SQL, GraphQL, gRPC, RESTCloud & Infrastructure: AWS, GCP, Kubernetes, HelmIdentity & Security Protocols: RBAC/ABAC/ReBAC; OAuth 2.0, OIDC, and JWT; SAML 2.0 and enterprise SSO federation (assertion validation, signature/encryption handling, IdP- vs. SP-initiated flows); SCIM for user provisioning and deprovisioningEngineering Practices: Event-driven architecture patterns; TDD or a genuine passion for automated testing [Nice to Have] Auth0 experienceSpiceDB / Zanzibar-style authorization system experienceApollo FederationOpenTelemetryExperience operating within SOC2 and/or GDPR-compliant environments What You'll Do: This role spans all three pillars of our identity platform in equal measure — this is not an authorization-only or authentication-only role. Design, build, and evolve our authorization platform (RBAC/ABAC/ReBAC), enabling teams across the company to answer "what can this user do?"Design, build, and evolve our authentication platform, covering authentication patterns across our range of use cases, working closely with our Auth0 integrationDesign, build, and evolve our user management platform — creating, provisioning, and managing user identities and entitlements — supporting our entire customer basePartner closely with security teams to ensure our authentication, authorization, and user management platforms are secure by design and aligned with SOC2 and GDPR requirementsDesign and implement highly scalable systems that keep pace with a constantly growing number of users and customersContribute to shaping our roadmap across all three domains — authentication, authorization, and user management — while owning execution of key initiativesBuild self-service systems and APIs (GraphQL, gRPC, REST) that make authentication, authorization, and user data consumable by product engineering teams across the companyCollaborate day-to-day with the rest of the User Management team, as well as other engineering teams that depend on our platformsChampion strong testing, observability, and reliability practices across the platform What We Offer: Playing a part in the story of a fast growing companyInteresting career opportunities and trainingRelocation support for single employees, couples and familiesWhile we do have an office in Helsinki, we’re a distributed company. We value outcomes over time, and offer flexible working arrangements. We usually meet at the office once a week.Private healthcare services from Terveystalo2 weeks of vacation granted up front, and possibility to use vacation days as they accrueAccess to gym room, gaming room, free parking near the office, mobile phone, Lunch benefit, mobile plan, home internet, remote work equipment, and many more.... is an equal-opportunity employer. We are committed to a work environment that supports, inspires, and respects all individuals. All employees share in the responsibility for fulfilling’s commitment to equal employment opportunity. does not discriminate against any employee or applicant on the basis of race, color, sex (including pregnancy), national origin, age, religion, marital status, sexual orientation, gender identity, gender expression, military or veteran status, disability, or any other non-merit factor. This policy applies to every aspect of employment at, including recruitment, hiring, training, advancement, and termination. In addition, it is the policy of to provide reasonable accommodation to qualified employees who have protected disabilities to the extent required by applicable laws, regulations, and ordinances where a particular employee works. Recruiting Scams and Fraud We at have been made aware of fraudulent job postings and individuals impersonating recruiters. These scams may involve fake job offers, requests for sensitive personal information, or demands for payment. Please note: never asks candidates to pay for job applications, equipment, or training.All official communications will come from an @ email address.If you’re unsure about a job posting or recruiter, verify it on our Careers page. If you believe you’ve been targeted by a scam or have any doubts regarding the authenticity of any job listing purportedly from or on behalf of please contact us. Your security and trust matter to us. Match 22% Good match We match every vacancy against your profile and show a fit score — so you instantly know which ones are worth applying to. Sign up and create a resume — it's free. Not enough data to estimate a salary range for this role in this region yet. About : The world’s most sophisticated companies rely on to remove uncertainty from decision-making. With market intelligence and search built on proven AI, delivers insights that matter from content you can trust. Our universe of public and private content includes equity research, company filings, event transcripts, expert calls, news, trade journals, and clients’ own research content. The acquisition of Tegus by in 2024 advances our shared mission to empower professionals to make smarter decisions through AI-driven market intelligence. Together, and Tegus will accelerate growth, innovation, and content expansion, with complementary product and content capabilities that enable users to unearth even more comprehensive insights from thousands of content sets. Our platform is trusted by over 6,000 enterprise customers, including a majority of the S&P 500. Founded in 2011, is headquartered in New York City with more than 2,000 employees across the globe and offices in the U.S., U.K., Finland, India, Singapore, Canada, and Ireland. Come join us! About The Team: The User Management team owns the full identity lifecycle at — from creating and provisioning users, through managing their identities, to authenticating who they are and authorizing what they can do in the system. Our work spans three core domains:User Management — creating, provisioning, and managing user identitiesAuthentication — verifying who users areAuthorization — determining what users can do in the system We are a product platform team, not a product team: we build the identity and access infrastructure that other engineering teams build on top of, rather than shipping user-facing features ourselves. We also act as a security guardrail for , since identity and access sit at the center of how the platform stays secure. The team is well-established and senior, based in Helsinki, Finland, and pushing deliberately toward a true platform model — scaling our authentication and authorization systems so they can be safely self-served by teams across the company. Who You Are: Backend: Java 2X, Spring Boot 3.X.X, WebFlux, MavenData & APIs: SQL, GraphQL, gRPC, RESTCloud & Infrastructure: AWS, GCP, Kubernetes, HelmIdentity & Security Protocols: RBAC/ABAC/ReBAC; OAuth 2.0, OIDC, and JWT; SAML 2.0 and enterprise SSO federation (assertion validation, signature/encryption handling, IdP- vs. SP-initiated flows); SCIM for user provisioning and deprovisioningEngineering Practices: Event-driven architecture patterns; TDD or a genuine passion for automated testing [Nice to Have] Auth0 experienceSpiceDB / Zanzibar-style authorization system experienceApollo FederationOpenTelemetryExperience operating within SOC2 and/or GDPR-compliant environments What You'll Do: This role spans all three pillars of our identity platform in equal measure — this is not an authorization-only or authentication-only role. Design, build, and evolve our authorization platform (RBAC/ABAC/ReBAC), enabling teams across the company to answer "what can this user do?"Design, build, and evolve our authentication platform, covering authentication patterns across our range of use cases, working closely with our Auth0 integrationDesign, build, and evolve our user management platform — creating, provisioning, and managing user identities and entitlements — supporting our entire customer basePartner closely with security teams to ensure our authentication, authorization, and user management platforms are secure by design and aligned with SOC2 and GDPR requirementsDesign and implement highly scalable systems that keep pace with a constantly growing number of users and customersContribute to shaping our roadmap across all three domains — authentication, authorization, and user management — while owning execution of key initiativesBuild self-service systems and APIs (GraphQL, gRPC, REST) that make authentication, authorization, and user data consumable by product engineering teams across the companyCollaborate day-to-day with the rest of the User Management team, as well as other engineering teams that depend on our platformsChampion strong testing, observability, and reliability practices across the platform What We Offer: Playing a part in the story of a fast growing companyInteresting career opportunities and trainingRelocation support for single employees, couples and familiesWhile we do have an office in Helsinki, we’re a distributed company. We value outcomes over time, and offer flexible working arrangements. We usually meet at the office once a week.Private healthcare services from Terveystalo2 weeks of vacation granted up front, and possibility to use vacation days as they accrueAccess to gym room, gaming room, free parking near the office, mobile phone, Lunch benefit, mobile plan, home internet, remote work equipment, and many more.... is an equal-opportunity employer. We are committed to a work environment that supports, inspires, and respects all individuals. All employees share in the responsibility for fulfilling’s commitment to equal employment opportunity. does not discriminate against any employee or applicant on the basis of race, color, sex (including pregnancy), national origin, age, religion, marital status, sexual orientation, gender identity, gender expression, military or veteran status, disability, or any other non-merit factor. This policy applies to every aspect of employment at, including recruitment, hiring, training, advancement, and termination. In addition, it is the policy of to provide reasonable accommodation to qualified employees who have protected disabilities to the extent required by applicable laws, regulations, and ordinances where a particular employee works. Recruiting Scams and Fraud We at have been made aware of fraudulent job postings and individuals impersonating recruiters. These scams may involve fake job offers, requests for sensitive personal information, or demands for payment. Please note: never asks candidates to pay for job applications, equipment, or training.All official communications will come from an @ email address.If you’re unsure about a job posting or recruiter, verify it on our Careers page. If you believe you’ve been targeted by a scam or have any doubts regarding the authenticity of any job listing purportedly from or on behalf of please contact us. Your security and trust matter to us.