SENIOR IDENTITY & AUTHORIZATION ENGINEER @ ESOL GLOBAL
We are seeking a highly skilled Senior Identity & Authorization Engineer to spearhead the design and development of a Zanzibar-based Relationship-Based Access Control (ReBAC) authorization system. This role is pivotal for our complex, multi-tenant B2B platform, where you will be responsible for building a robust Go-based Authorization Service and accompanying middleware. You will deploy these solutions on AWS using EKS and PostgreSQL, ensuring high availability and scalability for our global infrastructure and identity management needs.
In this 12-month contract role, you will lead the migration from our legacy authentication framework to a modern, externalized system while creating efficient ingestion pipelines using Kafka and SCIM to manage complex organizational hierarchies. Working remotely with a minimum 6-hour overlap with US-EST, you will collaborate closely with cross-functional teams to enable long-term ownership of the security architecture. Ideal candidates will have a deep technical background in ReBAC, SpiceDB, and infrastructure automation via Terraform.
In this 12-month contract role, you will lead the migration from our legacy authentication framework to a modern, externalized system while creating efficient ingestion pipelines using Kafka and SCIM to manage complex organizational hierarchies. Working remotely with a minimum 6-hour overlap with US-EST, you will collaborate closely with cross-functional teams to enable long-term ownership of the security architecture. Ideal candidates will have a deep technical background in ReBAC, SpiceDB, and infrastructure automation via Terraform.
Key Requirements
Proven professional experience in strong hands-on coding with Golang.
In-depth knowledge of Zanzibar-based ReBAC systems such as SpiceDB or OpenFGA.
Extensive experience with AWS cloud services, specifically EKS.
Proficiency in managing infrastructure as code using Terraform.
Strong relational database management skills with PostgreSQL.
Extensive background in IAM and complex Authorization systems.
Familiarity with monitoring and observability tools like Datadog.
Ability to build and maintain ingestion pipelines using Kafka and SCIM.
Experience leading migrations from legacy authentication to modern externalized systems.
Excellent communication skills for collaborating with distributed remote teams.
Ability to work in a US-EST overlapping time zone (6+ hours).