Staff Software Engineer, Identity & Access Management

Java 2X, Spring Boot 3.X.X, WebFlux, Maven

SQL, GraphQL, gRPC, REST

Cloud & Infrastructure:

AWS, GCP, Kubernetes, Helm

Identity & Security Protocols:

RBAC/ABAC/ReBAC; OAuth 2.0, OIDC, and JWT; SAML 2.0 and enterprise SSO federation (assertion validation, signature/encryption handling, IdP- vs.

This is a Staff Engineer role on the team that manages identity and access for AlphaSense's entire, and constantly growing, customer base, and that nearly every product engineering team depends on for user and entitlement data.

You'll work across all three pillars of identity: creating and managing users, authenticating them, and authorizing what they can do — designing systems built to scale with a constantly growing number of users.

Security is core to this role, not adjacent to it — you'll work closely with our security teams to make sure what we build is secure by design, in an environment governed by SOC2 and GDPR.

We're looking for a genuinely senior, self-sufficient engineer with strong experience building and operating identity, authentication, or authorization platforms at scale, ideally in a platform/product-platform engineering context.

This is someone who doesn't just execute a roadmap, but helps understand the needs behind it, shapes it, and then drives execution — largely autonomously, and in close collaboration with our core team based in Helsinki.

This role spans all three pillars of our identity platform in equal measure — this is not an authorization-only or authentication-only role.

The User Management team owns the full identity lifecycle at AlphaSense — from creating and provisioning users, through managing their identities, to authenticating who they are and authorizing what they can do in the system. Our work spans three core domains:

User Management

— creating, provisioning, and managing user identities

Authentication

— verifying who users are

Authorization