This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Software Engineer, Backend (Consumer Authentication Platform) based in Canada.
This is a senior backend engineering role focused on building secure, reliable, and seamless authentication experiences at significant scale.
You will help power critical consumer journeys including sign-up, sign-in, account recovery, checkout authentication, session management, and step-up challenges.
The role offers broad technical ownership, from defining architecture and technical requirements through implementation, rollout, and ongoing operations.
You will work closely with Product, Security, Fraud, Compliance, Analytics, Data Science, Design, and engineering teams across the organization.
A major focus is balancing security, regulatory requirements, fraud prevention, customer experience, scalability, and delivery speed.
You will influence the evolution of a reusable authentication platform supporting multiple products, merchants, and geographies.
As a senior technical contributor, you will also mentor engineers, raise engineering standards, and lead complex technical and production challenges.
Accountabilities:
- Own the technical design and delivery of significant authentication platform capabilities, taking initiatives from requirements and architecture through implementation, rollout, and operation.
- Build secure, highly available backend systems supporting sign-in, authentication factors, account recovery, step-up authentication, session management, authorization, and identity federation.
- Partner with product management, security, fraud, compliance, design, analytics, and engineering stakeholders to shape solutions and make informed technical decisions.
- Translate security, regulatory, fraud, and customer-experience requirements into pragmatic technical designs that balance risk, friction, complexity, and delivery speed.
- Proactively identify and address project, technology, security, reliability, process, and business risks.
- Monitor system health and operational performance through appropriate metrics, escalation processes, and on-call support.
- Establish and improve code review, design, quality, and security standards, sharing best practices through technical documentation, discussions, and presentations.
- Mentor engineers through design reviews, hands-on collaboration, feedback, and technical guidance, helping build a strong culture of ownership and continuous development.
- Clearly communicate technical decisions, constraints, risks, and trade-offs to both technical and non-technical audiences.
- Lead investigations into complex production incidents and implement systemic improvements to prevent recurring issues.
Requirements
- 4+ years of experience designing, developing, and launching backend systems at scale using Python, Kotlin, Java, or a comparable modern programming language.
- Experience building highly available distributed systems using technologies such as AWS, MySQL, Kubernetes, relational databases, event-driven architectures, and RPC or API frameworks.
- Demonstrated ability to create technical plans and designs for significant features or system components, emphasizing security, simplicity, extensibility, and maintainability.
- Strong software engineering skills, including the ability to make substantial changes safely within large codebases through effective testing, migration strategies, and controlled rollouts.
- Demonstrated ownership of professional growth, including actively seeking feedback and helping other engineers develop through mentorship and technical leadership.
- Strong written and verbal communication skills for effective collaboration with distributed engineering teams and cross-functional stakeholders.
- Bachelor’s degree in a related field or equivalent practical experience.
- Familiarity with authentication and identity standards such as OAuth 2.0, OpenID Connect, WebAuthn/passkeys, FIDO2, JWTs, and public-key cryptography.
- Knowledge of security and assurance frameworks such as NIST Digital Identity Guidelines or PCI DSS.
- Experience designing session management, token issuance, account recovery, or multi-factor authentication systems.
- Familiarity with risk-based or adaptive authentication and the relationship between identity, security, compliance, and fraud controls.
- For this remote position, candidates must reside in Alberta, British Columbia, Manitoba, New Brunswick, Newfoundland and Labrador, Nova Scotia, Ontario, Prince Edward Island, or Saskatchewan.
Benefits
- CAD $153,000–$213,000 annual base salary, with compensation determined in part by location, experience, and job-related skills.
- Total compensation may include equity rewards in addition to base pay.
- 100% subsidized medical coverage for employees and their dependents.
- Dental and vision coverage for employees and their dependents.
- Monthly stipends to support technology needs and health and wellness expenses.
- Remote-first work environment with flexibility built into the role.
- Flexible time off and generous holiday schedules.
- Employee Stock Purchase Plan (ESPP) providing an opportunity to purchase company stock at a discount.
- Inclusive interview and workplace practices, with accommodations available for candidates with disabilities.
- In-person onboarding experience for new hires, with occasional office attendance depending on role requirements.
How Jobgether works:
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
#LI-CL1
