Software Engineer - Auth0/AuthZ (Java)

New Relic•Portland, OR

2d•Remote

About The Position

New Relic's whole platform runs on an assumption: by the time a request reaches any service, someone has already answered two questions, who is this, and what are they allowed to do. The Access & Governance Platform team builds and runs the systems that answer both. On the authentication side, that means login, session and token management, and enterprise SSO integrations (SAML, OIDC, OAuth2) for customers who need to plug New Relic into their own identity provider. On the authorization side, it means the roles, capabilities, and grants model that every other team at New Relic checks against before letting a user touch anything. Because these services sit underneath everything else, the problems here are rarely simple CRUD. You're modeling access at the scale of every account and organization on the platform, keeping login working through traffic spikes and identity-provider outages, and building the self-service tooling other engineering teams use to adopt fine-grained authorization for their own services. You'll also carry on-call for these systems, because when they have a bad day, so does the rest of New Relic.

Requirements

1+ years of experience building and shipping reliable software services.
Expertise in backend languages; our services span Ruby, Java, and others, with Ruby or Java preferred.
Experience working with data models and managing data at scale, including comfort writing and reasoning about SQL against relational databases.
Strong collaboration and communication skills, especially explaining technical tradeoffs to non-technical stakeholders.

Nice To Haves

Experience with Identity and Access Management protocols (SCIM, OAuth2, SAML, or OIDC).
Experience with GraphQL APIs.
Experience with observability tools and platforms.
Experience working in the public cloud (AWS, Azure, and/or GCP).
Experience with container technologies such as Kubernetes and Docker.

Responsibilities

Build and operate authentication services, including SSO (SAML, OIDC), OAuth2/OIDC token issuance, session and token lifecycle, SCIM-based user provisioning, and bot/fraud defense, for both direct login and enterprise SSO customers.
Build APIs and internal tooling that let other engineering teams and internal stakeholders manage and troubleshoot user data and access controls.
Collaborate closely with product management, product design, and your engineering team to solve complex use cases.
Participate in the team's on-call/hero rotation: triage production incidents, investigate access, authentication, and authorization issues reported by other teams and customers, and turn resolutions into runbooks.
Investigate and fix reliability, data-integrity, and security issues in production systems, including routine dependency and container vulnerability remediation.