Senior Software Engineer I

Zinnia•Alpharetta, GA

About The Position

Zinnia is seeking a Senior Software Engineer to join its Enterprise API & CIAM team. The role will extend and scale the company’s Customer Identity and Access Management platform, which supports authentication and fine-grained authorization for carriers, distributors, agents, policyholders, and service integrations across Zinnia Live, Market Connect, and TPA services. The engineer will build identity flows, evolve authorization, and help product teams integrate securely, working closely with the CIAM tech lead, product management, and security and compliance partners in a regulated insurance environment. Zinnia describes itself as a technology platform for life and annuities. It reports more than $180 billion in assets under administration, over 100 carrier clients, 2,500 distributors and partners, and more than 2 million policyholders. The company highlights career progression, competitive compensation, benefits, and collaboration with professionals working to transform insurance through technology, data insights, and services.

Requirements

At least 6 years of professional software development experience, including building and operating production cloud services; AWS is preferred.
Hands-on experience implementing OAuth 2.0, OpenID Connect, and SAML, including federation with external identity providers.
Experience with a CIAM platform such as Auth0, Okta, or PingOne; Auth0 is preferred.
Experience designing authorization systems beyond basic roles, such as attribute- or relationship-based models.
Strong backend skills in TypeScript/Node.js or a comparable language, with solid API design, testing, and software design fundamentals.
Working knowledge of CI/CD, infrastructure as code, containers, monitoring, and alerting.
Clear written and verbal communication skills and ability to work with engineers, product managers, and security partners across a distributed team.
Experience working in an Agile/Scrum environment.

Nice To Haves

Experience with OpenFGA, Auth0 FGA, or other Zanzibar-style authorization systems.
Experience with event-driven architectures such as Kafka/Confluent, API gateways such as Kong, MongoDB, Terraform, or Datadog.
Background in insurance, financial services, or another regulated industry, especially agent and distributor hierarchies, licensing and appointments, or delegated access.

Responsibilities

Build and evolve authentication flows, including workforce SSO federation using SAML/OIDC, passwordless login for agents and consumers, and machine-to-machine access for service integrations.
Design and implement fine-grained authorization using role-, attribute-, and relationship-based access control (RBAC, ABAC, and ReBAC), with access scoped by carrier, product, distributor, hierarchy, and delegation.
Build automated provisioning and lifecycle handling for user onboarding, transfers, delegated access, and termination.
Design, document, and maintain CIAM APIs used by other Zinnia teams.
Partner with product teams to onboard applications to the CIAM integration pattern.
Own the quality and reliability of shipped work through automated testing, code review, observability, and on-call participation.
Work with security and compliance teams to implement access controls, support audits, and ensure access decisions are logged and explainable.