Staff Engineer – Identity and Access Management User Platform

Drive technical direction, guide architectural decisions, and lead complex engineering initiatives to evolve Spotify's identity and access management systems.

Design and evolve distributed systems that support authentication, authorization, and identity-related capabilities across Spotify's platform.

Partner with engineers, product managers, and security specialists to identify opportunities, align priorities, and deliver improvements to foundational platform capabilities.

Improve system reliability, performance, observability, and operational resilience, ensuring our identity services can support Spotify's continued growth.

Mentor and support engineers across User Platform, sharing knowledge, raising engineering standards, and creating an environment where others can grow.

Encourage thoughtful experimentation, continuous improvement, and collaboration while taking ownership of meaningful technical outcomes.

You have extensive experience designing, building, and operating large-scale systems across different platforms.

You have a deep understanding of identity and access management concepts, including authentication, authorization, customer identity lifecycle management (e.g., account creation, user state, and account recovery), and secure access patterns.

You have experience influencing architecture and technical direction across multiple engineering teams, even when you don't have direct authority over their work.

You know how to evaluate complex technical trade-offs and make pragmatic decisions that balance security, reliability, performance, and developer experience.

You care about building resilient, observable, and maintainable systems and have experience improving services operating at significant scale.

You communicate complex technical ideas clearly, bring different perspectives into decisions, and help teams move forward together.

You enjoy mentoring engineers, sharing knowledge, and creating an inclusive environment where people can contribute, learn, and do their best work.

We offer you the flexibility to work where you work best! For this role, you can be within the EMEA region as long as we have a work location (excluding France due to on-call restrictions).

This team operates within the Central European and GMT time zone for collaboration.