engineering
Posted 3 hours agoPrincipal Software Engineer - Identity & Access Management
at Sezzle
IndiaRemote
Responsibilities
- Own the technical vision and roadmap for Sezzle’s authentication and authorization platform, including a dedicated API auth gateway and supporting identity services.
- Architect, design, and build scalable, highly-available auth services and gateway components primarily in Golang , leveraging AWS , RDS (MySQL/Postgres) , and modern distributed patterns.
- Design and lead phased, zero-downtime migrations of auth traffic and functionality, with clear rollback and safety mechanisms at every step.
- Establish and evolve authentication and authorization standards across the platform: OAuth2/OIDC flows, token strategy (JWT, opaque, refresh), service-to-service auth (mTLS, workload identity), and fine-grained authorization models (RBAC/ABAC/policy engines).
- Drive consistency and scalability across a distributed microservices architecture while maintaining the performance, reliability, and latency budgets expected of an edge gateway.
- Establish and evolve engineering best practices for observability, security, and CI/CD across teams, with particular rigor on the auth-critical path.
- Mentor engineers and champion a culture of learning, innovation, and operational excellence.
- Collaborate cross-functionally to translate business goals into technical roadmaps and deliver results that matter. Minimum Requirements:
- Proven track record leading a large-scale service extraction or migration : decomposing a monolith or large legacy service into well-bounded services with zero or minimal customer impact.
- Track record of shipping commercial APIs and platform infrastructure in high-growth environments.
Requirements
- At Sezzle, AI-assisted development is a standard part of how we build, paired with the rigorous review and security discipline the auth-critical path demands.
- As a principal engineer, you will help set the pattern for how AI tooling is used well on security-sensitive systems. Key Responsibilities
- Deep, hands-on expertise in authentication and authorization systems : OAuth2, OpenID Connect, SAML, JWT and session-based auth, token lifecycle management, and modern authorization patterns (RBAC, ABAC, policy-as-code). •
- Experience designing, building, or operating an API gateway or auth proxy at scale : whether a commercial/open-source gateway (e.g., Kong, Envoy, AWS API Gateway, Traefik) or an in-house edge service.
- Strong proficiency in Golang , with
- Expertise with SQL-based RDBMS (MySQL, PostgreSQL) and
- Solid understanding of distributed systems design patterns (e.g., transactional outbox, event-driven architecture, queues) and the specific challenges of high-throughput, low-latency edge services.
- Demonstrated ability to bring new ideas forward , influence decisions, and lead complex technical initiatives across many teams.
- Demonstrated AI-forward engineering : you actively use AI tooling (e.g., Claude Code, Codex, Cursor, or custom LLM integrations) in your development work today, have opinions grounded in practice about where it helps and where it doesn't, and help teammates adopt AI-assisted workflows.
- Bachelor’s degree in Computer Science or a similar technical field (required).
- Experience with identity platforms and standards implementations (e.g., Keycloak, Auth0, Okta, Ory, or in-house IdPs), and familiarity with fine-grained authorization approaches (policy-as-code, relationship-based access control) as we centralize authorization over time. •
- Experience with service mesh and edge technologies (Envoy, Istio, mTLS, rate limiting, WAF integration).
- Familiarity with threat modeling, secure design review, and common auth attack vectors (token theft, replay, CSRF, session fixation, privilege escalation).
- Proficiency in observability tools (Prometheus, Grafana, Datadog, New Relic), especially for latency-sensitive edge services. •
- Experience with AWS cloud infrastructure , mainly AWS Aurora RDS, both MySQL and Postgres. •
- Experience in fintech , payments, BNPL, or consumer lending - familiarity with financial compliance (PCI-DSS, SOC 2), credit decisioning, or transaction processing systems. •
- Experience with CI/CD pipelines and containerized microservices (Docker, Kubernetes).
- Languages: Golang, Typescript, Python
- Frontend: Typescript - React and React Native Backend: Golang
- Database: MySQL, Postgres, Elasticsearch
- DevOps & Cloud: AWS, Kubernetes
- Version Control: Git CI/CD: Gitlab
Experience
- 12+ years of professional software engineering experience, including significant backend experience.
Benefits
- The salary range for this role is negotiable, the range being $6,000-$11,000 per month (Gross in USD), based on location and experience level. About Sezzle:
- experience for consumers and merchants alike, come join us at Sezzle and help create the future of shopping! Compensation :
- For this principal development role, with 12+ years of experience, the compensation range is $6000 - $11000 per month, negotiable based on the skills and
- You get principal-level scope and ownership at a growing fintech, competitive compensation, and no relocation or commute attached to it.
- As the Principal Software Engineer leading this effort, you will own the technical vision, architecture, and migration strategy for this transformation.
- You earn trust - you listen attentively, speak candidly, and treat others respectfully.
- Our culture is not defined by a certain set of perks designed to give the illusion of the traditional startup culture, but rather, it is the visible example living in every employee that we hire.
Additional details
- With a mission to financially empower the next generation, Sezzle is revolutionizing the shopping
- experience beyond payments, blending cutting-edge tech with seamless, interest-free installment plans that make shopping smarter and more accessible.
- We’re not just transforming payments; we’re redefining how people discover, interact with, and purchase the things they love while driving real impact on merchant sales through increased conversions and higher order values.
- As we continue to shape the future of fintech and retail, we’re building an innovative, dynamic team passionate about creating more than just a transaction but a truly unique shopping journey.
- If you’re excited about pushing boundaries in tech and delivering a game-changing
- experience being brought to the table. This range acknowledges the extensive expertise, leadership capabilities, and significant contributions expected at this level.
- We believe the best engineers can do world-class work from anywhere, and we hire accordingly.
- This role presents an exciting opportunity to thrive in a dynamic, fast-paced environment within a rapidly growing team, with abundant prospects for career advancement.
- In this backend focused role, you will work closely with stakeholders from Product, Security, Support and the business.
- You’ll also partner with engineering teams across the organization to deliver auth capabilities that are safe, incremental to adopt, and invisible to customers. Your day-to-day