Staff Engineer

About AlphaSense:

The world's most sophisticated companies rely on AlphaSense to remove uncertainty from decision-making. With market intelligence and search built on proven AI, AlphaSense delivers insights that matter from content you can trust. Our platform is trusted by over 6,000 enterprise customers, including a majority of the S&P 500. Founded in 2011, AlphaSense is headquartered in New York City with more than 2,000 employees across the globe.

About the Team:

The User Management team owns the full identity lifecycle at AlphaSense, from creating and provisioning users, through managing their identities, to authenticating who they are and authorizing what they can do in the system. Our work spans three core domains:

• User Management: creating, provisioning, and managing user identities
• Authentication: verifying who users are
• Authorization: determining what users can do in the system

We are a product platform team, not a product team: we build the identity and access infrastructure that other engineering teams build on top of. The team is well-established and senior, based in Helsinki, Finland. We are now expanding into North America, with roles based in both Canada and the US, to build follow-the-sun coverage and to push toward a true platform model.

About the Role:

This is a Staff Engineer role on the team that manages identity and access for AlphaSense's entire, constantly growing customer base. You will work across all three pillars of identity: creating and managing users, authenticating them, and authorizing what they can do. Security is core to this role. You will work closely with security teams to make sure what we build is secure by design, in an environment governed by SOC2 and GDPR.

We are looking for a genuinely senior, self-sufficient engineer with strong experience building and operating identity, authentication, or authorization platforms at scale, ideally in a platform or product-platform engineering context. This person helps shape the roadmap and drives execution largely autonomously, in close collaboration with the core team in Helsinki.

Who You Are:

• Backend: Java 2X, Spring Boot 3.X.X, WebFlux, Maven
• Data & APIs: SQL, GraphQL, gRPC, REST
• Cloud & Infrastructure: AWS, GCP, Kubernetes, Helm
• Identity & Security Protocols: RBAC/ABAC/ReBAC; OAuth 2.0, OIDC, and JWT; SAML 2.0 and enterprise SSO federation (assertion validation, signature/encryption handling, IdP- vs. SP-initiated flows); SCIM for user provisioning and deprovisioning
• Engineering Practices: Event-driven architecture patterns; TDD or a genuine passion for automated testing

Nice to Have:

• Auth0 experience
• SpiceDB / Zanzibar-style authorization system experience
• Apollo Federation
• OpenTelemetry
• Experience operating within SOC2 and/or GDPR-compliant environments

What You'll Do:

This role spans all three pillars of the identity platform in equal measure.

• Design, build, and evolve the authorization platform (RBAC/ABAC/ReBAC)
• Design, build, and evolve the authentication platform, working closely with the Auth0 integration
• Design, build, and evolve the user management platform, supporting the entire customer base
• Partner closely with security teams to ensure platforms are secure by design and aligned with SOC2 and GDPR requirements
• Design and implement highly scalable systems that keep pace with a constantly growing number of users and customers
• Help define the long-term roadmap across authentication, authorization, and user management
• Build self-service systems and APIs (GraphQL, gRPC, REST) that make authentication, authorization, and user data consumable by product engineering teams
• Drive projects autonomously from North America while staying closely aligned with the Helsinki-based team
• Champion strong testing, observability, and reliability practices across the platform

Compensation Range:

Standard ranges are set for all roles based on function and level. Salary ranges are shared on all job postings regardless of hiring location. Final offer amounts depend on factors including candidate experience and expertise. You may also be offered equity and a generous benefits program. The listed range is $202,400 to $278,300 USD.

Equal Opportunity:

AlphaSense is an equal-opportunity employer and does not discriminate on the basis of any protected characteristic. It provides reasonable accommodation to qualified employees with protected disabilities as required by applicable law.

Recruiting Scams and Fraud:

AlphaSense never asks candidates to pay for job applications, equipment, or training. All official communications come from an @alpha-sense.com email address. Verify any job posting or recruiter on the AlphaSense Careers page.