Lead Engineer II – Senior Engineer, Authentication and Authorization IRC302231

Description We’re building the identity and access layer that every service in our SaaS control plane depends on. You’ll own the common auth stack — making sure the right principals get the right access, consistently, across every tenant and product surface.

Requirements You should have

– 5+ years building auth systems in production SaaS environments.

– Strong Go or Python (ideally both); comfortable writing performant, well-tested service code in either.

– Deep knowledge of OAuth 2.0, OIDC, JWT, and SAML — not just using libraries but understanding what’s happening underneath.

– Experience with authorization policy engines (OPA, Casbin, or equivalent) and modeling complex permission structures.

– Familiarity with multi-tenant isolation patterns and the security implications of getting them wrong.

– Comfort in an AWS/EKS environment with secrets management (AWS Secrets Manager, Vault).

Nice to have: SCIM provisioning, FIDO2/WebAuthn, zero-trust networking, SOC 2 audit experience, or prior work on a shared platform team serving internal consumers.

Job responsibilities

What you’ll do

– Design and operate the centralized authn/authz platform: token issuance and validation (OIDC/JWT), OAuth 2.0 flows, API key management, and service-to-service identity.

– Build and maintain the authorization model: RBAC and ABAC policies, tenant isolation enforcement, and fine-grained permission evaluation (Open Policy Agent or similar).

– Expose auth as a shared internal service consumed by the rest of the control plane — clean APIs, well-documented contracts, and minimal coupling.

– Partner with product and platform teams to implement SSO integrations (SAML, SCIM) and onboard enterprise identity providers.

– Harden the auth layer: token rotation, secret management, audit logging, and threat modeling against common identity attacks.

– Drive adoption of consistent auth patterns across services, replacing one-off implementations.

What we offer

Exciting Projects: We focus on industries like High-Tech, communication, media, healthcare, retail and telecom. Our customer list is full of fantastic global brands and leaders who love what we build for them.

Collaborative Environment: You Can expand your skills by collaborating with a diverse team of highly talented people in an open, laidback environment — or even abroad in one of our global centers or client facilities!

Work-Life Balance: GlobalLogic prioritizes work-life balance, which is why we offer flexible work schedules, opportunities to work from home, and paid time off and holidays.

Professional Development: Our dedicated Learning & Development team regularly organizes Communication skills training(GL Vantage, Toast Master),Stress Management program, professional certifications, and technical and soft skill trainings.

Excellent Benefits: We provide our employees with competitive salaries, family medical insurance, Group Term Life Insurance, Group Personal Accident Insurance , NPS(National Pension Scheme ), Periodic health awareness program, extended maternity leave, annual performance bonuses, and referral bonuses.

Fun Perks: We want you to love where you work, which is why we host sports events, cultural activities, offer food on subsidies rates, Corporate parties. Our vibrant offices also include dedicated GL Zones, rooftop decks and GL Club where you can drink coffee or tea with your colleagues over a game of table and offer discounts for popular stores and restaurants!

About GlobalLogic GlobalLogic, a Hitachi Group Company, is a trusted digital engineering partner to the world’s largest and most forward-thinking companies. Since 2000, we’ve been at the forefront of the digital revolution – helping create some of the most innovative and widely used digital products and experiences. Today we continue to collaborate with clients in transforming businesses and redefining industries through intelligent products, platforms, and services.