Principal Identity and API Architect
Core
Design and own the end-to-end identity architecture and API security strategy for a programmatic advertising exchange, authenticating billions of transactions for publishers and buyers.
Role type
Principal Identity and API Architect
Builds
Identity platform, Auth0 tenant architecture, multi-tenant authorization models, API gateway layer, and federated SSO integrations.
Domain
Digital advertising / Programmatic marketplace / Identity & Access Management
Deliverable
production ML models | product features | infrastructure
Required skills
Identity and IAM architecture, OAuth 2.0 and OIDC flows, ReBAC systems (OpenFGA, SpiceDB), API gateway design, AWS identity infrastructure, SAML 2.0 and OIDC integrations, threat modeling, backend development (Go, Java, or Python)
Preferred skills
Experience with Auth0 Actions/Rules, mTLS enforcement, service-to-service authentication patterns, multi-tenant authorization hierarchies
Technologies
Auth0, OpenFGA, SpiceDB, Ory Keto, Traefik, Kong, AWS API Gateway, AWS IAM, Cognito, Secrets Manager, KMS, STS
Responsibilities
Architect end-to-end identity platform including tenant models and SSO integrations; Design and implement Auth0 tenant architecture with token lifecycle management; Define and enforce OAuth 2.0 and OIDC flows across the Exchange; Build and operate multi-tenant authorization models using ReBAC systems; Own the API gateway layer with rate limiting and mTLS enforcement; Lead publisher-side identity integrations including federated SSO; Lead demand-side identity integrations for DSPs and agencies; Manage AWS identity and API infrastructure including IAM roles and cross-account trust; Establish identity and API security standards and conduct threat modeling; Mentor engineers on identity best practices and secure API design.
Seniority
Principal, hands-on IC with strategic thought leadership
