Senior Software Engineer I

Zinnia•Alpharetta, GA

About The Position

Zinnia is seeking a Senior Software Engineer to join its Enterprise API & CIAM team. The role focuses on extending and scaling the Customer Identity and Access Management platform, which provides authentication and fine-grained authorization for carriers, distributors, agents, policyholders, and service integrations across Zinnia Live, Market Connect, and TPA services. The engineer will build identity flows, evolve the authorization model, and help product teams integrate securely. The role works closely with the CIAM tech lead, product management, and security and compliance partners in a regulated insurance environment.

Requirements

At least 6 years of professional software development experience, including building and operating production services in the cloud; AWS is preferred.
Hands-on experience implementing OAuth 2.0, OpenID Connect, and SAML, including federation with external identity providers.
Experience with a CIAM platform such as Auth0, Okta, or PingOne; Auth0 is preferred.
Experience designing authorization systems beyond basic roles, such as attribute- or relationship-based models.
Strong backend skills in TypeScript/Node.js or a comparable language, with solid fundamentals in API design, testing, and software design.
Working knowledge of CI/CD, infrastructure as code, containers, monitoring, and alerting.
Clear written and verbal communication and ability to work with engineers, product managers, and security partners across a distributed team.
Experience working in an Agile/Scrum environment.

Nice To Haves

Experience with OpenFGA, Auth0 FGA, or other Zanzibar-style authorization systems.
Experience with event-driven architectures (Kafka/Confluent), API gateways (Kong), MongoDB, Terraform, or Datadog.
Background in insurance, financial services, or another regulated industry, especially agent and distributor hierarchies, licensing and appointments, or delegated access.

Responsibilities

Build and evolve authentication flows, including workforce SSO federation using SAML/OIDC, passwordless login for agents and consumers, and machine-to-machine access for service integrations.
Design and implement fine-grained authorization combining role-, attribute-, and relationship-based access control (RBAC, ABAC, and ReBAC) to scope access by carrier, product, distributor, hierarchy, and delegation.
Build automated provisioning and lifecycle handling to keep access current as users are onboarded, transferred, given delegated access, or terminated.
Design, document, and maintain CIAM APIs consumed by other Zinnia teams.
Partner with product teams to onboard applications to the CIAM integration pattern.
Own the quality and reliability of shipped work through automated testing, code review, observability, and on-call participation.
Work with security and compliance teams to implement access controls, support audits, and ensure access decisions are logged and explainable.