The ad says“Work hands-on with modern identity standards: OAuth 2.0, OIDC, PKCE, DPoP, SCIM, JWT lifecycle, and security best practices for native-app authentication”
The ad says“Design and build authentication services and flows end-to-end — backend services (Go, Java, TypeScript), identity platform configuration and custom actions, and native mobile and web login experiences — with high standards for reliability, observability, and security”
The ad says“Design and build authentication services and flows end-to-end — backend services (Go, Java, TypeScript), identity platform configuration and custom actions, and native mobile and web login experiences — with high standards for reliability, observability, and security”
The ad says“Work hands-on with modern identity standards: OAuth 2.0, OIDC, PKCE, DPoP, SCIM, JWT lifecycle, and security best practices for native-app authentication”
The ad says“8+ years of experience building backend and/or full-stack systems (e.g., Go, Java, Node.js, TypeScript, React)”
The ad says“Work hands-on with modern identity standards: OAuth 2.0, OIDC, PKCE, DPoP, SCIM, JWT lifecycle, and security best practices for native-app authentication”
The ad says“Work hands-on with modern identity standards: OAuth 2.0, OIDC, PKCE, DPoP, SCIM, JWT lifecycle, and security best practices for native-app authentication”
The ad says“Work hands-on with modern identity standards: OAuth 2.0, OIDC, PKCE, DPoP, SCIM, JWT lifecycle, and security best practices for native-app authentication”
The ad says“8+ years of experience building backend and/or full-stack systems (e.g., Go, Java, Node.js, TypeScript, React)”
The ad says“Work hands-on with modern identity standards: OAuth 2.0, OIDC, PKCE, DPoP, SCIM, JWT lifecycle, and security best practices for native-app authentication”
The ad says“Own identity infrastructure as code — Terraform-managed identity tenants, service configuration, and deployment automation — treating auth configuration with the same rigor as production code”
The ad says“Design and build authentication services and flows end-to-end — backend services (Go, Java, TypeScript), identity platform configuration and custom actions, and native mobile and web login experiences — with high standards for reliability, observability, and security”
Values
The ad says“Deep experience with either (a) customer identity and authentication — OAuth 2.0/OIDC and CIAM platforms such as Auth0, Cognito, or Keycloak — or (b) large-scale identity or security infrastructure (cloud IAM, authorization systems, multi-region tier-0 services), with genuine interest in going deep on the other”
The ad says“Deep experience with either (a) customer identity and authentication — OAuth 2.0/OIDC and CIAM platforms such as Auth0, Cognito, or Keycloak — or (b) large-scale identity or security infrastructure (cloud IAM, authorization systems, multi-region tier-0 services), with genuine interest in going deep on the other”
The ad says“Deep experience with either (a) customer identity and authentication — OAuth 2.0/OIDC and CIAM platforms such as Auth0, Cognito, or Keycloak — or (b) large-scale identity or security infrastructure (cloud IAM, authorization systems, multi-region tier-0 services), with genuine interest in going deep on the other”
The ad says“Deep experience with either (a) customer identity and authentication — OAuth 2.0/OIDC and CIAM platforms such as Auth0, Cognito, or Keycloak — or (b) large-scale identity or security infrastructure (cloud IAM, authorization systems, multi-region tier-0 services), with genuine interest in going deep on the other”
The ad says“Bonus: familiarity with SAML, SCIM, FIDO2/WebAuthn or passkeys, fraud and account-protection systems, or regulated financial environments”
The ad says“Bonus: familiarity with SAML, SCIM, FIDO2/WebAuthn or passkeys, fraud and account-protection systems, or regulated financial environments”
The ad says“Deep experience with either (a) customer identity and authentication — OAuth 2.0/OIDC and CIAM platforms such as Auth0, Cognito, or Keycloak — or (b) large-scale identity or security infrastructure (cloud IAM, authorization systems, multi-region tier-0 services), with genuine interest in going deep on the other”
The ad says“Bonus: familiarity with SAML, SCIM, FIDO2/WebAuthn or passkeys, fraud and account-protection systems, or regulated financial environments”
The ad says“Bonus: familiarity with SAML, SCIM, FIDO2/WebAuthn or passkeys, fraud and account-protection systems, or regulated financial environments”
Remitly’s Authentication (AuthN) team, part of the Identity & Trust organization, owns the login and identity platform that millions of customers rely on to securely access and move their money across 170+ countries. We operate customer identity at scale on a leading customer identity platform and own everything around it — the services, infrastructure-as-code, and mobile and web experiences that power OAuth 2.0/OIDC flows, token lifecycle, MFA, passwordless and phone-based login, and machine-to-machine authentication for internal workloads and external partners
AuthN is a tier-0 system: when login degrades, Remitly stops. Our work sits at the intersection of security, reliability, and user experience — a login that is bulletproof but adds friction loses customers; one that is frictionless but weak loses their trust. You will report to the Engineering Manager of the Authentication team in Vancouver
Design and build authentication services and flows end-to-end — backend services (Go, Java, TypeScript), identity platform configuration and custom actions, and native mobile and web login experiences — with high standards for reliability, observability, and security
Work hands-on with modern identity standards: OAuth 2.0, OIDC, PKCE, DPoP, SCIM, JWT lifecycle, and security best practices for native-app authentication
Own identity infrastructure as code — Terraform-managed identity tenants, service configuration, and deployment automation — treating auth configuration with the same rigor as production code
Build for resilience at scale: availability targets, login-success observability and alerting, IdP failover strategy, and incident response for a system where minutes of downtime affect customers worldwide
Evolve our MFA, passwordless, and phone-login capabilities, and deliver regulatory requirements such as PSD2 in partnership with compliance
Design workload and machine-to-machine identity for internal services and external partners — token issuance, quota and caching strategy, and self-serve onboarding patterns used by teams across Remitly
Partner with Application Security on threat modeling, secure design reviews, and remediation of findings from penetration tests and our bug bounty program
Champion Remitly’s values by mentoring peers, raising the bar through design docs and code review, and contributing to the team’s technical strategy
Benefits
Spend up to $1,000 per year on costs related to continuing education or on travel to countries Remitly serves, allowing you to gain insights to our customer’s journeys
All of our office spaces offer our employees a place to collaborate and celebrate. With locally sourced artwork and vibrant designs, they create an environment that all can enjoy
Fill your cup up outside of work and take advantage of our generous paid time off policies, leave policies, and flex working hours to ensure you are able to meet the demands of life outside of work
Tap into the learning routines, resources and affinity groups Remitly provides to help you further your own DEI journey
Contribute to the communities we serve through volunteering, employee giving, or civic advocacy
Remitly provides rich benefit plans intended to cover the needs of our diverse teammates
Preferred experience
Bonus: familiarity with SAML, SCIM, FIDO2/WebAuthn or passkeys, fraud and account-protection systems, or regulated financial environments
A BS in Computer Science or equivalent professional experience
A track record of pragmatic trade-offs between security, user experience, and delivery — and of collaborating with product, design, security, and compliance partners to ship high-impact solutions
Experience operating high-availability production systems, and comfort participating in on-call for critical infrastructure
8+ years of experience building backend and/or full-stack systems (e.g., Go, Java, Node.js, TypeScript, React)
Deep experience with either (a) customer identity and authentication — OAuth 2.0/OIDC and CIAM platforms such as Auth0, Cognito, or Keycloak — or (b) large-scale identity or security infrastructure (cloud IAM, authorization systems, multi-region tier-0 services), with genuine interest in going deep on the other
