Principal Software Engineer – Identity & Access Management

About the role

Sezzle is looking for a Principal Software Engineer to lead the evolution of its authentication and authorization platform. This remote, backend‑focused position will own the technical vision, architecture, and migration strategy for a purpose‑built API auth gateway and identity services.

Key responsibilities

• Define and execute the roadmap for the auth platform, including API gateway and identity services built primarily in Golang on AWS.
• Architect scalable, highly‑available services, design zero‑downtime migrations, and establish security standards such as OAuth2/OIDC, JWT, RBAC/ABAC.
• Partner with Security, Compliance, Product, and engineering teams to ensure fintech‑grade security and regulatory compliance.
• Lead observability, CI/CD, and on‑call rotation for auth‑critical services, mentoring engineers and driving operational excellence.

Required profile

• 12+ years of professional software engineering experience with strong backend expertise.
• Hands‑on experience designing, building, or operating large‑scale authentication and authorization systems.
• Proven track record leading service extraction or migration projects with zero customer impact.
• Demonstrated use of AI‑assisted development tools and ability to influence technical decisions across teams.

Required skills

• Golang
• AWS (including Aurora RDS, MySQL, PostgreSQL)
• OAuth2, OpenID Connect, SAML, JWT, RBAC, ABAC
• API gateway technologies (Kong, Envoy, AWS API Gateway, Traefik)
• SQL databases (MySQL, PostgreSQL)
• Distributed systems patterns (event‑driven architecture, transactional outbox)
• Observability tools (Prometheus, Grafana, Datadog, New Relic)
• Containerization and orchestration (Docker, Kubernetes)
• CI/CD pipelines