Senior Enterprise Engineer

• Duolingo’s Enterprise Engineering team builds and operates the internal platforms, identity systems, and automation that power how Duos work every day
• We apply modern engineering practices—infra as code, CI/CD, and internal tools—to deliver secure, reliable, and scalable employee experiences
• As a Senior Enterprise Engineer, you will design and ship high‑impact projects across identity and access, SaaS integrations and governance, device/endpoint platforms, and employee lifecycle automation
• You’ll partner closely with Security, Finance, Legal, and Platform to reduce toil through automation, improve reliability, and turn policy into maintainable workflows and code
• This role is based in New York City or Pittsburgh
• We believe exceptional candidates come from all backgrounds
• If you meet only some of the qualifications below, we encourage you to apply!
• Design and implement foundational enterprise services (e.g., identity and access management, SaaS integrations, MDM/endpoint, internal tooling) with reliability, security, and scalability in mind
• Build and evolve infrastructure‑as‑code, CI/CD, and configuration‑as‑code patterns; contribute modules/templates and participate in reviews to raise the engineering bar across Enterprise Engineering
• Automate employee lifecycle workflows (onboarding, transfers, offboarding), RBAC/SCIM provisioning, and policy enforcement across core systems like Okta, Google Workspace, Slack, and Atlassian
• Define and measure SLOs for internal services; create dashboards, alerts, and runbooks; participate in incident response and on‑call for enterprise platforms
• Partner with Security, Finance, Legal, and Procurement to implement SaaS governance, license optimization, and risk controls—codifying processes into auditable, testable workflows
• Deliver cross‑functional initiatives end‑to‑end: author clear specs, align stakeholders, de‑risk launches, and land durable outcomes with strong documentation

Benefits

• Medical, dental, and vision for employees as well as eligible partners and dependents
• Mental health benefits such as therapy sessions and coaching to support you to be your best self
• Fertility benefits to support your family planning journey
• Fully paid parental and adoption leave
• Fully paid subscription to Care.com and paid backup days for dependents and your fur family
• 401(k) with generous match and immediate vesting
• 20 days of paid time off, with two additional weeks off for winter break
• First-time home buyer bonus (in Pittsburgh)
• Competitive salaries and equity
• Yearly stipend for professional development
• Transportation reimbursement for however you get to work
• Lunch prepared daily by our in-house chefs
• Annual international retreat for all full-time employees
• Monthly events celebrating our team and their amazing work
• On-site gym and massages
• Game room for taking brain breaks

• Hands‑on experience with infrastructure‑as‑code and CI/CD (e.g., Terraform and modern pipelines) to manage identity, SaaS, or internal platform configuration
• Strong background in identity and access management concepts and integrations (SSO/SAML/OIDC, SCIM provisioning, RBAC/ABAC) across enterprise systems
• Operational excellence: you define SLOs, build dashboards/alerts/runbooks, and contribute to on‑call/incident response for internal platforms
• Proficiency building automations and internal tooling that integrate with APIs for systems like Okta, Google Workspace, Slack, and Atlassian
• Proven impact shipping multi‑stakeholder engineering projects that improve reliability, efficiency, or employee experience at scale
• Clear, concise communication and documentation skills; you collaborate effectively with Security, Finance, Legal, and Platform partners
• The ability to work from or relocate to New York City or Pittsburgh
• Experience implementing SaaS governance and license optimization programs with Finance/Procurement and Security partners
• A track record building reliable joiner/mover/leaver automation at scale, including data pipelines and policy guardrails
• Experience defining and landing engineering standards for internal platforms (module libraries, templates, checkers, documentation patterns) adopted org‑wide
• Prior ownership of MDM/endpoint platforms and fleet‑level automation for security/compliance baselines
• Incident leadership experience for enterprise systems and the ability to drive lasting post‑incident improvements