Solution Architect

• Own and evolve the Identity layer that connects multiple products within a large-scale SaaS platform.
• Define and enforce architectural standards and best practices across engineering teams for authentication and authorization.
• Drive cross-team alignment on identity-related design decisions, acting as the primary technical authority on the topic.
• Design and oversee the implementation of SSO, RBAC, and authentication/authorization flows for new and existing integrations.
• Lead design reviews, contribute to RFC processes, and participate in architectural governance.
• Collaborate with product managers, engineering leads, and client stakeholders to translate business requirements into scalable identity solutions.
• Monitor and continuously improve the security posture of the identity infrastructure. 

This is a high-visibility, strategic role at a US-based SaaS product company in the data collection and analytics space. The engineer will have genuine ownership over the Identity layer across a multi-product ecosystem — not just execution.

The tech stack is modern (Auth0, OAuth2/OIDC), the client team is senior and technically strong, and the engagement has a long-term outlook with potential to grow into broader platform architecture ownership. The project operates in the Central US time zone with daily sync calls with the client team. 

• 10+ years of overall IT experience.
• 5+ years of experience as a Solution or Enterprise Architect with a focus on identity and access management.
• Strong hands-on knowledge of IAM protocols: OAuth2, OpenID Connect, SSO, RBAC.
• Proven experience with Auth0 or a comparable Identity Provider (Okta, Azure AD B2C, Keycloak, etc.).
• Solid background in PHP and/or Python ecosystems.
• Experience designing and enforcing architectural standards across multiple engineering teams and products.
• Strong communication skills: ability to drive alignment, facilitate technical decisions, and present to mixed technical/non-technical audiences.
• Upper-Intermediate English (B2+) — working language with the client.
• US-based project with daily communication; availability during the Central US time zone (CST/CDT) is required.

• Experience with SAML 2.0 and federation protocols.
• Familiarity with SOC 2 / ISO 27001 compliance requirements.
• Background in SaaS multi-tenant architecture.
• Knowledge of IaC tools (Terraform, Pulumi) for identity infrastructure provisioning.
• Experience in US-based product companies or client-facing delivery roles.