Software Engineer – Platform, Identity & Authorization
Location: Guadalajara, Mexico — Remote
Work Arrangement: Remote, with occasional onsite work if needed
Language: Fluent English and Spanish
Priority: Urgent
About the Role
We are looking for a Software Engineer to join a Platform team focused on Identity, Authentication, Authorization, and Backend Integrations.
In this role, you will build and enhance platform services that support federated identity and authorization across multiple products. You will work with Python, REST APIs, cloud services, identity protocols, multi-tenant SaaS architectures, and AI-assisted development tools.
This is a hands-on engineering role for someone who can take ownership of features from design through production, troubleshoot complex integration issues, and help other engineering teams successfully integrate with the platform.
Key Responsibilities
Identity & Authorization Platform
- Build and enhance platform services supporting federated identity, authentication, and authorization.
- Integrate with centralized identity platforms, including:
- Token management
- Session management
- User provisioning
- Tenant configuration
- Support product teams during identity and platform integrations.
- Help teams understand API/platform contracts, troubleshoot integration issues, and resolve multi-tenant identity scenarios.
- Develop documentation, tooling, and examples that make integrations easier and more self-service.
Backend & Integration Engineering
- Design and develop backend services primarily using Python.
- Build and integrate REST APIs, event-driven services, and webhooks.
- Design solutions for multi-product and multi-tenant SaaS environments.
- Consider tenant isolation, tenant-specific configuration, and cross-product user identity in all platform designs.
- Participate in API design and code reviews, with emphasis on:
- Clear API contracts
- Stability and backward compatibility
- Developer experience
AI-Assisted Development
- Use AI development tools as part of the daily engineering workflow, including Claude Code, Codex, GitHub Copilot, or equivalent tools.
- Use AI for:
- Code generation
- Design exploration and validation
- Test generation
- Troubleshooting and investigation
- Contribute to AI harnesses and evaluation tools that improve engineering productivity and help identify regressions.
- Share effective AI development practices with the engineering team.
Testing, Quality & Observability
- Write appropriate unit, integration, and acceptance tests.
- Build reliable, maintainable, and production-ready software.
- Implement observability using:
- Structured logging
- Metrics
- Alerting
- Participate in on-call rotations.
- Investigate production incidents, identify root causes, and implement appropriate fixes.
Collaboration & Mentoring
- Participate in technical design discussions and code reviews.
- Provide and receive constructive technical feedback.
- Mentor and provide code-review support to L1 and L2 engineers.
- Contribute to technical documentation, runbooks, and onboarding materials.
What We're Looking For
Required Experience
- 3–5 years of professional software engineering experience.
- Proven ability to independently own and deliver production features from design through release.
- Hands-on experience developing backend services using Python or .NET.
- Experience developing RESTful APIs.
- Production experience implementing or integrating with identity systems using one or more of:
- OAuth 2.0
- OpenID Connect (OIDC)
- SAML 2.0
- JWT
- Practical understanding of authorization frameworks and how authorization policies are modeled, enforced, and integrated into applications and platform services.
Identity & Authorization Knowledge
You should understand the fundamentals of modern identity systems, including:
- OAuth 2.0 authorization flows
- Authorization Code Flow
- OIDC
- SAML
- JWT and token-based authentication
- Token introspection
- Claims-based authorization
- Assertion handling
- Session management
- SSO logout behavior
- Token expiration, signing, revocation, and secure storage
Experience with RBAC, ABAC, or policy-based authorization is highly desirable.
Backend & Cloud Technologies
- Strong proficiency with Python or .NET.
- Experience with modern backend/API frameworks such as:
- Experience with multi-tenant SaaS architectures.
- Understanding of tenant-scoped configuration and user identity across application boundaries.
- Familiarity with AWS, particularly cloud services related to:
- Networking
- Compute
- Secrets management
Development Tools
Experience with:
- Git
- CI/CD pipelines
- Docker / containerization
- Automated testing
- Modern software development practices
Active experience using AI-assisted development tools such as Claude, Codex, GitHub Copilot, or equivalent is required.
Preferred Qualifications
The following experience is a strong plus:
- Engineering experience with an identity platform, IAM system, OIDC provider, or enterprise SSO solution.
- Experience implementing fine-grained authorization, including RBAC, ABAC, or policy-based access control.
- Experience in financial services, fintech, or another regulated technology environment.
- Experience building internal platform services used by other engineering teams.
- Knowledge of SOC 2 or similar compliance frameworks from an engineering perspective.
- Experience developing AI harnesses, evaluation pipelines, or engineering productivity tools.
- Experience using AI tools for more than code completion, including design exploration, testing, debugging, and investigation.
L3 Engineering Expectations
At the L3 level, you are expected to demonstrate increasing technical ownership and independence.
You should be able to:
- Deliver well-defined features with limited guidance.
- Take a requirement through design → development → testing → production release.
- Identify edge cases, risks, and potential failure modes.
- Write clean and maintainable code.
- Participate actively in code reviews.
- Proactively identify blockers and communicate issues.
- Build integrations that are reliable, observable, and fault-tolerant.
- Consider API versioning and backward compatibility.
- Monitor and support the software you build.
- Follow production incidents through to resolution.
- Document important technical knowledge and processes.
- Begin taking a mentorship role with more junior engineers.
Education
- Bachelor's degree in Computer Science, Software Engineering, or a related technical discipline, or equivalent professional experience.
Language Requirements
- Fluent English and Spanish are required.
- Interviews may be conducted in English or Spanish via video conference.
Work Requirements
- Must be located in Guadalajara, Mexico.
- Position is remote, with occasional onsite work if required.
