Role Overview
The Principal Software Engineer - Identity & Access Management role at Sezzle is a backend-focused leadership position centered on owning and evolving the authentication and authorization platform. Operating on a fully remote basis in India, this opportunity suits an experienced engineer with deep expertise in distributed systems, security-critical paths, and modern identity architectures.
Key Responsibilities
Own the technical vision, architecture, and migration strategy for Sezzle's authentication and authorization platform, encompassing a dedicated API auth gateway and core identity services.
Architect and build scalable, highly available auth services and gateway components primarily utilizing Golang, AWS, and relational database management systems.
Lead phased, zero-downtime migrations of authentication traffic with built-in rollback and safety mechanisms.
Establish platform-wide standards for OAuth2/OIDC flows, token strategies, service-to-service authentication using mTLS and workload identity, and fine-grained authorization models like RBAC and ABAC.
Partner closely with Security and Compliance teams to guarantee that fintech-grade regulatory and security requirements are met across all touchpoints.
Drive observability, security, and CI/CD engineering best practices while mentoring team members and shaping the adoption of AI-assisted development workflows.
Requirements
Minimum of 12 years of professional software engineering experience with a heavy emphasis on backend development.
Demonstrated track record of deploying significant changes to a production application recently.
Deep, hands-on knowledge of authentication and authorization mechanisms, including OAuth2, OpenID Connect, SAML, JWT, session management, and policy-as-code models.
Proven history of designing, operating, or building API gateways or authentication proxies at scale.
Experience leading large-scale service migrations or decoupling legacy monoliths into distributed services with minimal customer impact.
Strong practical proficiency in Golang alongside experience developing RESTful APIs.
Extensive familiarity with SQL-based relational databases like MySQL and PostgreSQL, including performance tuning and schema optimization.
Solid comprehension of distributed systems patterns such as event-driven architectures and transactional outboxes.
Bachelor's degree in Computer Science or a closely related technical discipline.
Nice to Have
Familiarity with commercial or open-source identity platforms and fine-grained authorization tooling like Keycloak, Auth0, Okta, Ory, or custom solutions.
Prior exposure to service meshes and edge technologies such as Envoy, Istio, rate limiting, and web application firewalls.
Experience dealing with threat modeling, secure design reviews, and common authentication attack vectors.
Background in fintech, consumer lending, buy-now-pay-later services, or payment processing ecosystems alongside regulatory compliance like PCI-DSS and SOC 2.
Proficiency in monitoring and observability platforms including Prometheus, Grafana, and Datadog.
Skills and Tools
Languages: Golang, Python, TypeScript
Cloud and DevOps: AWS, Kubernetes, Docker, AWS Aurora RDS
Databases: MySQL, PostgreSQL, Elasticsearch
Technologies: React, React Native, Git, GitLab, LLMs and AI coding tools
Salary and Benefits
Monthly gross compensation ranging from $6,000 to $11,000 USD, negotiable based on individual experience and skill level.
Fully remote working arrangement with no commute or relocation required.
About the Company
Sezzle is a mission-driven fintech organization dedicated to financially empowering the next generation through innovative, interest-free shopping and installment solutions. By bridging the gap between consumers, merchants, and smart financial tools, Sezzle is redefining how users discover and purchase products while driving higher merchant conversions. The company fosters a dynamic, collaborative environment that values high standards, calculated risk-taking, and decisive action.
How to Apply
Interested candidates should review the requirements and submit an application directly on the official company careers page.
