Software Engineer 5 - Ads Authorization (AuthZ) Platform
Core
Designing and building a centralized authorization platform to provide access control across Netflix's Ads organization, including vendor evaluation and policy model design.
Role type
Senior backend software engineer (authorization systems)
Builds
Centralized authorization decision engine, SDKs, middleware, and reference implementations for the Ads Platform
Domain
Streaming/Entertainment, Cloud Infrastructure, Security/IAM
Deliverable
production ML models | product features | infrastructure
Required skills
Backend engineering, authorization system design (RBAC/ABAC/ReBAC), systems design (low-latency, caching), policy engine integration, multi-tenancy architecture
Preferred skills
Policy-as-code (Rego/Cedar/Polar), build-vs-buy evaluation, AuthN/AuthZ boundaries, B2B SaaS experience, open-source contributions
Technologies
Java/Kotlin/Go/Node/Python, Oso, Permit.io, Cerbos, OpenFGA, AuthZed, AWS Verified Permissions/Cedar, OPA/Rego
Responsibilities
Evaluate build vs. buy for centralized authorization, design policy models (roles, permissions, hierarchies), architect decision engine, integrate authz checks with platform/security teams, build reference implementations and SDKs, contribute to testing practices
Seniority
Senior, hands-on IC
