Lead Software Engineer, Core Platform

What You'll Do12

• Set daily technical direction and write production code for Core Platform services, covering identity and access management, communication services, and the User Activity Trail.
• Design secure access patterns for end users, internal services, and third-party integrations, including federation, multifactor authentication, and user-lifecycle migrations.
• Lead quarterly and multi-quarter initiatives from discovery and design through coding, testing, phased rollout, monitoring, and post-release support.
• Turn business, security, privacy, and reliability needs into maintainable architecture, API contracts, SDKs, event flows, and implementation plans.
• Build and maintain REST, GraphQL, and gRPC APIs, event-driven services, shared libraries, middleware, and developer tooling.
• Plan migrations with backward compatibility, automated validation, feature flags, rollback procedures, environment gates, and production verification.
• Serve as a senior escalation point during incidents, using logs, metrics, traces, and service-level objectives to diagnose distributed-system failures.
• Take part in the on-call rotation and coordinated after-hours releases when the schedule calls for it.
• Own the quarterly and multi-quarter technical roadmap for a major platform area or a related set of services.
• Break initiatives into workstreams, remove technical blockers, and coordinate execution for a team of roughly four or more engineers.
• Guide application, security, infrastructure, product, and vendor teams on integration and architecture, escalating org-wide calls to Staff engineers or architects.
• Retire legacy services and interfaces safely and convert recurring support issues into durable platform or self-service improvements.

Requirements12

• Bachelor's degree in computer science or a related technical field.
• 8 or more years of software engineering experience, with substantial backend or platform engineering responsibility.
• 3 or more years leading technical execution or coordinating delivery for an engineering team.
• Lead-level ownership across multiple modules, related services, or one large platform subsystem.
• Strong TypeScript and JavaScript skills plus production Node.js experience.
• Experience designing and running distributed APIs and services with REST, GraphQL, or gRPC.
• Working knowledge of event-driven architecture and asynchronous integration patterns.
• Solid grasp of identity and access concepts: OAuth 2.0, OpenID Connect, SAML, JWTs, service accounts, role and permission models, and delegated access.
• Production experience integrating with an enterprise identity-provider platform.
• Hands-on work with AWS, Kubernetes, Terraform or similar infrastructure-as-code tooling, and CI/CD systems.
• Strong PostgreSQL knowledge covering schema design, query optimization, and replication concepts.
• Experience carrying high-risk migrations or platform changes through production.

Preferred Qualifications12

• Okta Identity Engine, IDX, Okta APIs, or Okta Terraform configuration.
• PingFederate or comparable enterprise federation technology.
• SCIM provisioning and identity-governance migrations involving Saviynt or OneAccess.
• Change data capture synchronization with Debezium or a similar tool.
• Kafka or other event-driven platform experience.
• Communication-platform integrations with email, SMS, or third-party messaging providers.
• User-activity, audit-event, or compliance-event pipelines.
• Proof-of-possession security patterns such as DPoP.
• Fine-grained authorization, policy engines, permission registries, and multi-tenant role models.
• Datadog dashboards, tracing, alerting, and service-level objectives.
• SonarCloud, GitHub-based workflows, and automated quality gates.
• React or React Native experience.

Who Should Apply

Backend and platform engineers with eight or more years of shipping experience who have already led delivery for a team and want to stay close to the code. You should be comfortable moving between identity architecture, a Node.js codebase, and a live incident. Engineers who have run enterprise IdP integrations and risky production migrations will find the strongest fit.

Salary Insight