Senior Software Development Engineer (Authentication)

• Remitly’s Authentication (AuthN) team, part of the Identity & Trust organization, owns the login and identity platform that millions of customers rely on to securely access and move their money across 170+ countries. We operate customer identity at scale on a leading customer identity platform and own everything around it — the services, infrastructure-as-code, and mobile and web experiences that power OAuth 2.0/OIDC flows, token lifecycle, MFA, passwordless and phone-based login, and machine-to-machine authentication for internal workloads and external partners
• AuthN is a tier-0 system: when login degrades, Remitly stops. Our work sits at the intersection of security, reliability, and user experience — a login that is bulletproof but adds friction loses customers; one that is frictionless but weak loses their trust. You will report to the Engineering Manager of the Authentication team in Vancouver
• Design and build authentication services and flows end-to-end — backend services (Go, Java, TypeScript), identity platform configuration and custom actions, and native mobile and web login experiences — with high standards for reliability, observability, and security
• Work hands-on with modern identity standards: OAuth 2.0, OIDC, PKCE, DPoP, SCIM, JWT lifecycle, and security best practices for native-app authentication
• Own identity infrastructure as code — Terraform-managed identity tenants, service configuration, and deployment automation — treating auth configuration with the same rigor as production code
• Build for resilience at scale: availability targets, login-success observability and alerting, IdP failover strategy, and incident response for a system where minutes of downtime affect customers worldwide
• Evolve our MFA, passwordless, and phone-login capabilities, and deliver regulatory requirements such as PSD2 in partnership with compliance
• Design workload and machine-to-machine identity for internal services and external partners — token issuance, quota and caching strategy, and self-serve onboarding patterns used by teams across Remitly
• Partner with Application Security on threat modeling, secure design reviews, and remediation of findings from penetration tests and our bug bounty program
• Champion Remitly’s values by mentoring peers, raising the bar through design docs and code review, and contributing to the team’s technical strategy

Benefits

• Spend up to $1,000 per year on costs related to continuing education or on travel to countries Remitly serves, allowing you to gain insights to our customer’s journeys
• All of our office spaces offer our employees a place to collaborate and celebrate. With locally sourced artwork and vibrant designs, they create an environment that all can enjoy
• Fill your cup up outside of work and take advantage of our generous paid time off policies, leave policies, and flex working hours to ensure you are able to meet the demands of life outside of work
• Tap into the learning routines, resources and affinity groups Remitly provides to help you further your own DEI journey
• Contribute to the communities we serve through volunteering, employee giving, or civic advocacy
• Remitly provides rich benefit plans intended to cover the needs of our diverse teammates

• Bonus: familiarity with SAML, SCIM, FIDO2/WebAuthn or passkeys, fraud and account-protection systems, or regulated financial environments
• A BS in Computer Science or equivalent professional experience
• A track record of pragmatic trade-offs between security, user experience, and delivery — and of collaborating with product, design, security, and compliance partners to ship high-impact solutions
• Experience operating high-availability production systems, and comfort participating in on-call for critical infrastructure
• 8+ years of experience building backend and/or full-stack systems (e.g., Go, Java, Node.js, TypeScript, React)
• Deep experience with either (a) customer identity and authentication — OAuth 2.0/OIDC and CIAM platforms such as Auth0, Cognito, or Keycloak — or (b) large-scale identity or security infrastructure (cloud IAM, authorization systems, multi-region tier-0 services), with genuine interest in going deep on the other