Staff Software Engineer, End User Protection (Auth0)

The End User Protection Team 

Auth0 is an easy-to-implement authentication and authorization platform designed by developers for developers. We ensure access to applications is safe, secure, and seamless for the more than 100 million daily logins worldwide. Our modern approach to identity enables this Tier-0 global service to deliver convenience, privacy, and security, allowing customers to focus on innovation.

The End User Protection team is responsible for building and maintaining Auth0’s Attack Protection capabilities. Cyberattacks, such as credential stuffing and password spraying, often target end users to gain unauthorised access to applications. These attacks pose a significant threat, compromising user accounts and data. The Attack Protection features mitigate these risks by continuously monitoring user login behaviour and automatically detecting and blocking malicious activity. They protect users without adding unnecessary friction.
The team works closely with our Machine Learning and AI teams to develop and deploy cutting-edge detection models. This collaboration allows application builders to provide a secure login experience for their users while isolating them from the complexities and ever-evolving tactics of these attacks.

The Staff Software Engineer Opportunity

We are looking for a Staff Software Engineer to join our End User Protection team. 

What you’ll be doing 

• Be a part of a fast-paced, agile team.
• Design and build features using technologies such as Node.js (JavaScript/Typescript), AWS, Azure, MongoDB, PostgreSQL, DynamoDB and Kubernetes
• Lead the technical breakdown of highly complex, ambiguous requirements into clear, modular, and actionable engineering tasks, setting the standard for project clarity and velocity.
• Drive and own the engineering estimation process for large-scale initiatives, effectively managing risk and communicating technical trade-offs, timelines, and dependencies to engineering and product leadership.
• Drive cross-functional technical projects with other Auth0 and Okta engineering teams, ensuring alignment on service dependencies, security standards, and operational best practices.
• Act as a key technical collaborator and influencer with internal stakeholders (e.g., Product Management, Security, Infrastructure), proactively aligning technical roadmaps and advocating for architectural changes that support long-term product vision.
• Collaborate with industry-leading experts to implement the cutting-edge of Identity Protocols and Open Standards such as OpenID Connect, OAuth and SAML 
• Maintain and operate services at a high scale
• Participate in scheduled on-call rotations 

• Mentor senior and mid-level engineers, providing guidance on system design, code quality, testing practices, and career development. Foster a culture of technical excellence and collaborative ownership.

What you’ll bring to the role

• Practical experience using Node.js (JavaScript or Typescript) or a similar language
• Experience working on systems that are highly reliable, maintainable and scalable.
• Thorough understanding of application security and cloud security best practices
• A systematic problem-solving approach, coupled with strong communication skills and a sense of ownership and drive
• A track record of influencing engineering strategy and driving complex, multi-quarter projects to completion across organisational boundaries.
• Demonstrated ability to coach and grow other engineers in areas of system architecture, security, and operational rigour.
• Experience with cloud environments (AWS and Azure preferred)
• The ability to communicate your ideas and collaborate with other team members effectively in a remote working environment.
• Experience designing, analysing, and troubleshooting large-scale distributed systems
• Enthusiasm to work with and learn more about Identity Protocols such as OAuth, OIDC and SAML

And extra credit if you have experience in any of the following! 

• Existing knowledge of Identity Protocols such as OAuth, OIDC and SAML
• Existing knowledge of security engineering and application security
• Proven experience and understanding of architecture principles across infrastructure platforms, security, data, integration, and application layers

#LI-HYBRID

#LI-SH1
P-1030_3414639