<div class="content-intro"><h2><strong>About AlphaSense: </strong></h2> <p style="text-align: justify;"><span style="font-size: 12pt;">AlphaSense is the AI platform redefining market intelligence and workflow orchestration, trusted by thousands of leading organizations to drive faster, more confident decisions in business and finance. The platform combines domain-specific AI with a vast content universe of over 500 million premium business documents — including equity research, earnings calls, expert interviews, filings, news, and internal proprietary content. Purpose-built for speed, accuracy, and enterprise-grade security, AlphaSense helps teams extract critical insights, uncover market-moving trends, and automate complex workflows with high-quality outputs. With AI solutions like Generative Search, Generative Grid, and Deep Research, AlphaSense delivers the clarity and depth professionals need to navigate complexity and obtain accurate, real-time information quickly. For more information, visit <span><a href="http://www.alpha-sense.com" target="_blank">www.alpha-sense.com</a></span>. Come join us.</span></p></div><p><strong>About the Team:</strong></p> <p>The User Management team owns the full identity lifecycle at AlphaSense — from creating and provisioning users, through managing their identities, to authenticating who they are and authorizing what they can do in the system. Our work spans three core domains:</p> <ul> <li><strong>User Management</strong> — creating, provisioning, and managing user identities</li> <li><strong>Authentication</strong> — verifying who users are</li> <li><strong>Authorization</strong> — determining what users can do in the system</li> </ul> <p>We are a product <strong>platform</strong> team, not a product team: we build the identity and access infrastructure that other engineering teams build on top of, rather than shipping user-facing features ourselves. We also act as a security guardrail for AlphaSense, since identity and access sit at the center of how the platform stays secure.</p> <p>The team is well-established and senior, based in Helsinki, Finland. We're now expanding into North America — with roles based in both Canada and the US — to build follow-the-sun coverage, so our customers get proper support around the clock, and to push deliberately toward a true platform model — scaling our authentication and authorization systems so they can be safely self-served by teams across the company.</p> <p><strong>About the Role: </strong></p> <p>This is a Staff Engineer role on the team that manages identity and access for AlphaSense's entire, and constantly growing, customer base, and that nearly every product engineering team depends on for user and entitlement data. You'll work across all three pillars of identity: creating and managing users, authenticating them, and authorizing what they can do — designing systems built to scale with a constantly growing number of users. Security is core to this role, not adjacent to it — you'll work closely with our security teams to make sure what we build is secure by design, in an environment governed by SOC2 and GDPR.</p> <p>We're looking for a genuinely senior, self-sufficient engineer with strong experience building and operating identity, authentication, or authorization platforms at scale, ideally in a platform/product-platform engineering context. This is someone who doesn't just execute a roadmap, but helps understand the needs behind it, shapes it, and then drives execution — largely autonomously, and in close collaboration with our core team based in Helsinki. You're genuinely interested in security, comfortable partnering closely with security teams on secure-by-design systems, and comfortable working in a distributed, cross-timezone setup — based in North America, collaborating closely with a Helsinki-based team.</p> <h4><strong>Who You Are:</strong></h4> <ul> <li><strong>Backend:</strong> Java 2X, Spring Boot 3.X.X, WebFlux, Maven</li> <li><strong>Data & APIs:</strong> SQL, GraphQL, gRPC, REST</li> <li><strong>Cloud & Infrastructure:</strong> AWS, GCP, Kubernetes, Helm</li> <li><strong>Identity & Security Protocols:</strong> RBAC/ABAC/ReBAC; OAuth 2.0, OIDC, and JWT; SAML 2.0 and enterprise SSO federation (assertion validation, signature/encryption handling, IdP- vs. SP-initiated flows); SCIM for user provisioning and deprovisioning</li> <li><strong>Engineering Practices:</strong> Event-driven architecture patterns; TDD or a genuine passion for automated testing</li> </ul> <p><strong>[Nice to Have]</strong></p> <ul> <li>Auth0 experience</li> <li>SpiceDB / Zanzibar-style authorization system experience</li> <li>Apollo Federation</li> <li>OpenTelemetry</li> <li>Experience operating within SOC2 and/or GDPR-compliant environments</li> </ul> <p><strong>What You’ll Do:</strong><span style="font-weight: 400;"> </span></p> <p>This role spans all three pillars of our identity platform in equal measure — this is not an authorization-only or authentication-only role.</p> <ul> <li>Design, build, and evolve our <strong>authorization platform</strong> (RBAC/ABAC/ReBAC), enabling teams across the company to answer "what can this user do?"</li> <li>Design, build, and evolve our <strong>authentication platform</strong>, covering authentication patterns across our range