Senior Authorization Engineer - (IAM/Oauth/JWT)

We're looking for a highly skilled Senior Authorization Engineer to join our Operations team. This critical role is centered on maintaining the integrity, availability, and security of our core platform's authentication and authorization systems.

The successful candidate will be the primary administrator for our Identity and Access Management (IAM) infrastructure. You will be responsible for the configuration, monitoring, and troubleshooting of systems that rely on modern protocols like OAuth 2.0, OpenID Connect (OIDC), and JSON Web Tokens (JWT) to ensure secure access for our millions of learners and business customers. This role combines deep operational expertise with a strong security mindset.

Responsibilities:

Identity and Access Management (IAM)

• Design, implement, and maintain the infrastructure supporting the company's identity providers and directories (e.g., Active Directory, LDAP, Okta, Auth0).

• Own the configuration and enforcement of authentication and authorization policies across microservices, leveraging OAuth 2.0, OIDC, and JWT.

• Develop and manage automation scripts (e.g., Python, PowerShell, or Bash) for routine system health checks, user provisioning, and access reviews.

• Manage the lifecycle of certificates, secrets, and encryption keys necessary for secure communications and token signing.

System Operations and Security

• Administer and maintain robust, high-availability Linux and Windows server environments in the cloud (Azure/AWS).

• Proactively monitor system performance, security logs, and error reporting related to access control and authentication failures.

• Troubleshoot complex, multi-system authentication and authorization issues, working closely with engineering teams to resolve security-related incidents quickly.

• Ensure all identity and infrastructure configurations comply with internal security standards and external regulatory requirements.

Collaboration and Documentation

• Create and maintain detailed documentation for IAM architectures, operational procedures, runbooks, and troubleshooting guides.

• Collaborate with Development teams to integrate new applications and services smoothly into the existing centralized authentication framework.